Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 1,235

ID Title
CVE-2026-44826 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.2, Vvveb CMS does not validate the sign of the quantity parameter on the cart-add...
CVE-2021-47965 Unrestricted File Upload in wordpress (CVE-2021-47965)
CVE-2021-47964 Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated...
CVE-2021-47963 Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to...
CVE-2026-45035 OS Command Injection in tabby (CVE-2026-45035)
CVE-2026-44717 Code Injection in CVE-2026-44717 (CVE-2026-44717)
CVE-2026-45062 Vulnerability in github.com/dunglas/frankenphp (CVE-2026-45062)
CVE-2026-41553 OS Command Injection in dhtmlx (CVE-2026-41553)
CVE-2026-44088 Unrestricted File Upload in CVE-2026-44088 (CVE-2026-44088)
CVE-2025-54517 Out-of-Bounds Write in CVE-2025-54517 (CVE-2025-54517)
CVE-2026-41315 OS Command Injection in midoks (CVE-2026-41315)
CVE-2026-42555 Code Injection in com.ritense.valtimo:document (CVE-2026-42555)
CVE-2026-44791 Vulnerability in n8n (CVE-2026-44791)
CVE-2026-44789 Vulnerability in n8n (CVE-2026-44789)
CVE-2025-69443 Code Injection in CVE-2025-69443 (CVE-2025-69443)
CVE-2026-46442 Code Injection in flowise (CVE-2026-46442)
CVE-2026-41249 Code Injection in coreshop/core-shop (CVE-2026-41249)
CVE-2026-24000 Vulnerability in github.com/fleetdm/fleet/v4 (CVE-2026-24000)
CVE-2026-6271 Unrestricted File Upload in wordpress (CVE-2026-6271)
CVE-2026-8500 OS Command Injection in CVE-2026-8500 (CVE-2026-8500)
CVE-2026-45158 Vulnerability in opnsense (CVE-2026-45158)
CVE-2026-44194 OS Command Injection in opnsense (CVE-2026-44194)
CVE-2026-44193 Vulnerability in opnsense (CVE-2026-44193)
CVE-2026-45714 Code Injection in CVE-2026-45714 (CVE-2026-45714)
CVE-2026-45053 Unrestricted File Upload in CVE-2026-45053 (CVE-2026-45053)
CVE-2026-44377 Code Injection in CVE-2026-44377 (CVE-2026-44377)
CVE-2026-22599 SQL Injection in @strapi/content-type-builder (CVE-2026-22599)
CVE-2026-43999 Authorization Flaw in vm2 (CVE-2026-43999)
CVE-2026-43998 Vulnerability in vm2 (CVE-2026-43998)
CVE-2026-41957 Unsafe Deserialization in f5 (CVE-2026-41957)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →