Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 2,172

ID Title
CVE-2026-56705 Vulnerability in CVE-2026-56705 (CVE-2026-56705)
CVE-2026-56703 Code Injection in CVE-2026-56703 (CVE-2026-56703)
CVE-2026-56702 Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the...
CVE-2026-60004 KEV [KEV] Code Injection in gitea (CVE-2026-60004)
CVE-2026-71506 Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API...
CVE-2026-71505 Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API...
CVE-2026-40877 Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This i...
CVE-2026-78416 Vulnerability in CVE-2026-78416 (CVE-2026-78416)
CVE-2026-76071 Vulnerability in CVE-2026-76071 (CVE-2026-76071)
CVE-2026-76070 Vulnerability in CVE-2026-76070 (CVE-2026-76070)
CVE-2026-71364 Path Traversal in path-traversal (CVE-2026-71364)
CVE-2026-59568 Vulnerability in CVE-2026-59568 (CVE-2026-59568)
CVE-2026-76841 Code Injection in CVE-2026-76841 (CVE-2026-76841)
CVE-2026-78315 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78317 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78316 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78314 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78209 exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at...
CVE-2026-78157 A vulnerability was detected in Open5GS 2.8.0. This affects the function pcrf_rx_aar_cb of the...
CVE-2026-10053 Path Traversal in path-traversal (CVE-2026-10053)
CVE-2026-78136 chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in...
CVE-2026-76605 Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3 - ???.
CVE-2026-76604 Code Injection in CVE-2026-76604 (CVE-2026-76604)
CVE-2026-71513 Unsafe Deserialization in CVE-2026-71513 (CVE-2026-71513)
CVE-2026-49849 Unrestricted File Upload in laravel (CVE-2026-49849)
CVE-2026-27462 Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, lead...
CVE-2026-41449 OS Command Injection in CVE-2026-41449 (CVE-2026-41449)
CVE-2026-39909 Use-After-Free in cpp (CVE-2026-39909)
CVE-2026-50112 OS Command Injection in apache (CVE-2026-50112)
CVE-2026-77645 Vulnerability in deserialization (CVE-2026-77645)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →