Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 2,172

ID Title
CVE-2026-24792 in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...
CVE-2026-27891 FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to properly validate the f...
CVE-2026-26978 Unsafe Deserialization in CVE-2026-26978 (CVE-2026-26978)
CVE-2026-45495 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-26462 Vulnerability in CVE-2026-26462 (CVE-2026-26462)
CVE-2026-45135 Vulnerability in github.com/caddyserver/caddy/v2 (CVE-2026-45135)
CVE-2026-7304 Unsafe Deserialization in sglang (CVE-2026-7304)
CVE-2026-7301 Unsafe Deserialization in sglang (CVE-2026-7301)
CVE-2026-6902 Code Injection in CVE-2026-6902 (CVE-2026-6902)
CVE-2026-8507 Out-of-Bounds Write in CVE-2026-8507 (CVE-2026-8507)
CVE-2018-25332 Vulnerability in gitbucket (CVE-2018-25332)
CVE-2018-25324 Vulnerability in wordpress (CVE-2018-25324)
CVE-2021-47976 Cross-Site Request Forgery (CSRF) in csrf (CVE-2021-47976)
CVE-2021-47952 Code Injection in deserialization (CVE-2021-47952)
CVE-2020-37227 Unrestricted File Upload in CVE-2020-37227 (CVE-2020-37227)
CVE-2026-46703 Path Traversal in boxlite (CVE-2026-46703)
CVE-2025-67031 Code Injection in CVE-2025-67031 (CVE-2025-67031)
CVE-2026-44826 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.2, Vvveb CMS does not validate the sign of the quantity parameter on the cart-add...
CVE-2021-47964 Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated...
CVE-2021-47965 Unrestricted File Upload in wordpress (CVE-2021-47965)
CVE-2021-47963 Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to...
CVE-2026-44717 Code Injection in CVE-2026-44717 (CVE-2026-44717)
CVE-2026-45035 OS Command Injection in tabby (CVE-2026-45035)
CVE-2026-45062 Vulnerability in github.com/dunglas/frankenphp (CVE-2026-45062)
CVE-2026-41553 OS Command Injection in dhtmlx (CVE-2026-41553)
CVE-2026-44088 Unrestricted File Upload in CVE-2026-44088 (CVE-2026-44088)
CVE-2025-54517 Out-of-Bounds Write in CVE-2025-54517 (CVE-2025-54517)
CVE-2026-41315 OS Command Injection in midoks (CVE-2026-41315)
CVE-2026-42555 Code Injection in com.ritense.valtimo:document (CVE-2026-42555)
CVE-2026-44791 Vulnerability in n8n (CVE-2026-44791)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →