Remote Code Execution

⚔️ Attack Types Liées 2,905
slug: rce

Explication

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Exemple
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Étiquettes liées

🛡 Vulnérabilités associées 2,906

Image ID Titre
CVE-2026-54675 Traversée de chemin dans Sangoma Freepbx (CVE-2026-54675)
CVE-2026-101894 The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output)…
CVE-2026-93348 Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code…
CVE-2026-12264 Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config…
CVE-2026-12268 ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT…
CVE-2026-12267 ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy…
CVE-2026-82384 Désérialisation non sécurisée dans Apache (CVE-2026-82384)
CVE-2026-96896 Vulnérabilité dans WordPress (CVE-2026-96896)
CVE-2026-100843 Désérialisation non sécurisée dans Project Monai (CVE-2026-100843)
CVE-2026-100840 Vulnérabilité dans Project Monai (CVE-2026-100840)
CVE-2026-88772 KEV [KEV] Débordement de tampon dans Citrix ADC (CVE-2026-88772)
CVE-2026-82901 Téléversement de fichier dangereux dans WordPress (CVE-2026-82901)
CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing…
CVE-2026-100695 Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() database result is…
CVE-2026-100682 Budibase Server before 3.45.0 contains an arbitrary file write vulnerability in the PWA icon...
CVE-2026-100653 vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the…
CVE-2026-100639 SiYuan v3.8.3 fails to HTML-escape the data-subtype attribute when generating gutter-button markup…
CVE-2026-100389 GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment…
CVE-2026-100372 ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows…
CVE-2026-94445 A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's…
CVE-2026-85750 Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execution in image upload handling when…
CVE-2026-19804 Injection de code dans WordPress (CVE-2026-19804)
CVE-2026-87902 KEV [KEV] Vulnérabilité dans WordPress Core (CVE-2026-87902)
CVE-2026-13249 An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in…
CVE-2026-13248 An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface…
CVE-2026-61788 DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6…
CVE-2026-97359 HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows…
CVE-2026-80513 Désérialisation non sécurisée dans WordPress (CVE-2026-80513)
CVE-2026-70125 Microsoft Outlook Remote Code Execution Vulnerability
CVE-2026-93352 Téléversement de fichier dangereux dans Laravel Apache (CVE-2026-93352)

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus