Remote Code Execution

⚔️ Attack Types Liées 2,905

slug: rce

Explication

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。

📌 Exemple

Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Étiquettes liées

Denial of Service8702 Cross-Site Scripting8062 SQL Injection3878 Path Traversal2049 Privilege Escalation1502 Cross-Site Request Forgery1065 Server-Side Request Forgery855 Authentication Bypass851 Insecure Deserialization737 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnérabilités associées 2,906

ID	Titre	Gravité	Détecté
CVE-2026-6721	Injection de commande OS dans Ibm Concert (CVE-2026-6721)	Critical	il y a 3 semaines
CVE-2026-84474	A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret…	Critical	il y a 3 semaines
CVE-2026-71464	LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike…	Low	il y a 3 semaines
CVE-2026-18490	Désérialisation non sécurisée dans Ibm Financial Transaction Manager (CVE-2026-18490)	High	il y a 3 semaines
CVE-2026-96560	LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with…	Critical	il y a 3 semaines
CVE-2026-86677	ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized…	High	il y a 3 semaines
CVE-2026-19599	ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution…	Critical	il y a 3 semaines
CVE-2026-12370	ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were…	High	il y a 3 semaines
CVE-2026-96443	Vulnérabilité dans Apache (CVE-2026-96443)	Medium	il y a 3 semaines
CVE-2026-91794	An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient…	High	il y a 3 semaines
CVE-2026-91789	Écriture hors limites dans Microsoft Windows (CVE-2026-91789)	High	il y a 3 semaines
CVE-2026-75799	Injection de code dans WordPress (CVE-2026-75799)	Critical	il y a 3 semaines
CVE-2026-77987	Vulnérabilité dans Github (CVE-2026-77987)	Critical	il y a 3 semaines
CVE-2026-67615	openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated…	High	il y a 3 semaines
CVE-2026-88418	CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every…	High	il y a 3 semaines
CVE-2026-28324	SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability…	Critical	il y a 3 semaines
CVE-2026-28325	SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability…	High	il y a 3 semaines
CVE-2026-85995	Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature…	High	il y a 3 semaines
CVE-2026-43642	Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains a PHP object injection vulnerability in the billing…	High	il y a 3 semaines
CVE-2026-80156	Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1…	Critical	il y a 3 semaines
CVE-2026-80155	Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1…	Critical	il y a 3 semaines
CVE-2026-24239	Désérialisation non sécurisée dans Nvidia (CVE-2026-24239)	High	il y a 3 semaines
CVE-2026-24267	Désérialisation non sécurisée dans Nvidia (CVE-2026-24267)	High	il y a 3 semaines
CVE-2026-95675	D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that…	Critical	il y a 3 semaines
CVE-2026-74849	Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution…	Critical	il y a 3 semaines
CVE-2026-25254	Improper authorization leads to Remote Code Execution via SocketIO interface.	Critical	il y a 3 semaines
CVE-2026-15095	Traversée de chemin dans WordPress (CVE-2026-15095)	Medium	il y a 3 semaines
CVE-2025-1281	Traversée de chemin dans WordPress (CVE-2025-1281)	High	il y a 3 semaines
CVE-2026-91827	Désérialisation non sécurisée dans WordPress (CVE-2026-91827)	High	il y a 3 semaines
CVE-2026-94127 KEV	[KEV] Vulnérabilité dans F5 Big Ip Access Policy Manager (CVE-2026-94127)	Critical	il y a 3 semaines