Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 2,172

ID Title
CVE-2026-23537 Vulnerability in dos (CVE-2026-23537)
CVE-2026-8387 Vulnerability in path-traversal (CVE-2026-8387)
CVE-2026-7838 Vulnerability in cpp (CVE-2026-7838)
CVE-2026-58449 Code Injection in CVE-2026-58449 (CVE-2026-58449)
CVE-2026-13773 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-13773)
CVE-2026-13759 Unsafe Deserialization in ibm (CVE-2026-13759)
CVE-2026-58138 Code Injection in CVE-2026-58138 (CVE-2026-58138)
CVE-2026-10109 Code Injection in ibm (CVE-2026-10109)
CVE-2026-58169 Vulnerability in CVE-2026-58169 (CVE-2026-58169)
CVE-2026-58116 Code Injection in hiyouga (CVE-2026-58116)
CVE-2026-53691 Unrestricted File Upload in CVE-2026-53691 (CVE-2026-53691)
CVE-2026-12240 Unsafe Deserialization in wordpress (CVE-2026-12240)
CVE-2026-34597 OS Command Injection in CVE-2026-34597 (CVE-2026-34597)
CVE-2026-34594 OS Command Injection in CVE-2026-34594 (CVE-2026-34594)
CVE-2026-57950 ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control...
CVE-2026-56285 Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and...
CVE-2026-56290 KEV [KEV] Unrestricted File Upload in Joomlack page-builder-ck (CVE-2026-56290)
CVE-2026-40521 Path Traversal in path-traversal (CVE-2026-40521)
CVE-2026-13165 Unrestricted File Upload in CVE-2026-13165 (CVE-2026-13165)
CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...
CVE-2026-49869 OS Command Injection in kestra (CVE-2026-49869)
CVE-2026-32833 OS Command Injection in CVE-2026-32833 (CVE-2026-32833)
CVE-2026-52780 Vulnerability in CVE-2026-52780 (CVE-2026-52780)
CVE-2026-48090 Use-After-Free in envoy (CVE-2026-48090)
CVE-2026-57518 Vulnerability in privilege-escalation (CVE-2026-57518)
CVE-2026-0685 Vulnerability in CVE-2026-0685 (CVE-2026-0685)
CVE-2026-48706 Vulnerability in envoy (CVE-2026-48706)
CVE-2026-44024 Path Traversal in fluentd (CVE-2026-44024)
CVE-2026-57315 Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.
CVE-2025-71338 Code Injection in flowise (CVE-2025-71338)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →