Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 2,172

ID Title
CVE-2026-48554 OS Command Injection in CVE-2026-48554 (CVE-2026-48554)
CVE-2026-48553 OS Command Injection in CVE-2026-48553 (CVE-2026-48553)
CVE-2026-11325 OS Command Injection in CVE-2026-11325 (CVE-2026-11325)
CVE-2026-67282 Code Injection in CVE-2026-67282 (CVE-2026-67282)
CVE-2026-16051 Code Injection in wordpress (CVE-2026-16051)
CVE-2026-18391 Unrestricted File Upload in wordpress (CVE-2026-18391)
CVE-2026-15039 Unrestricted File Upload in wordpress (CVE-2026-15039)
CVE-2026-66147 Code Injection in CVE-2026-66147 (CVE-2026-66147)
CVE-2026-14863 OS Command Injection in CVE-2026-14863 (CVE-2026-14863)
CVE-2026-73034 Path Traversal in path-traversal (CVE-2026-73034)
CVE-2026-73032 Code Injection in CVE-2026-73032 (CVE-2026-73032)
CVE-2026-66145 Code Injection in CVE-2026-66145 (CVE-2026-66145)
CVE-2026-19091 Path Traversal in wordpress (CVE-2026-19091)
CVE-2026-13457 Unrestricted File Upload in wordpress (CVE-2026-13457)
CVE-2026-73226 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions t...
CVE-2026-73222 Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds t...
CVE-2026-72742 DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
CVE-2026-62819 Use-After-Free in microsoft (CVE-2026-62819)
CVE-2026-53415 Use-After-Free in CVE-2026-53415 (CVE-2026-53415)
CVE-2026-53413 Out-of-Bounds Write in CVE-2026-53413 (CVE-2026-53413)
CVE-2025-31114 Vulnerability in CVE-2025-31114 (CVE-2025-31114)
CVE-2026-17061 Unsafe Deserialization in deserialization (CVE-2026-17061)
CVE-2026-48046 Vulnerability in CVE-2026-48046 (CVE-2026-48046)
CVE-2026-72781 Vulnerability in CVE-2026-72781 (CVE-2026-72781)
CVE-2026-72778 Vulnerability in csrf (CVE-2026-72778)
CVE-2026-72767 OS Command Injection in CVE-2026-72767 (CVE-2026-72767)
CVE-2026-72764 Vulnerability in CVE-2026-72764 (CVE-2026-72764)
CVE-2026-72748 Vulnerability in dos (CVE-2026-72748)
CVE-2026-72556 OS Command Injection in CVE-2026-72556 (CVE-2026-72556)
CVE-2026-72551 OS Command Injection in CVE-2026-72551 (CVE-2026-72551)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →