Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 2,172

ID Title
CVE-2026-72538 Vulnerability in CVE-2026-72538 (CVE-2026-72538)
CVE-2026-15555 Unsafe Deserialization in deserialization (CVE-2026-15555)
CVE-2026-13716 Vulnerability in path-traversal (CVE-2026-13716)
CVE-2026-18941 Vulnerability in dos (CVE-2026-18941)
CVE-2026-72882 OS Command Injection in CVE-2026-72882 (CVE-2026-72882)
CVE-2026-71965 Vulnerability in CVE-2026-71965 (CVE-2026-71965)
CVE-2026-69118 Authorization Flaw in CVE-2026-69118 (CVE-2026-69118)
CVE-2026-19429 Vulnerability in CVE-2026-19429 (CVE-2026-19429)
CVE-2026-42537 Vulnerability in apache (CVE-2026-42537)
CVE-2026-55799 Code Injection in apache (CVE-2026-55799)
CVE-2026-44416 Code Injection in apache (CVE-2026-44416)
CVE-2026-66915 Code Injection in CVE-2026-66915 (CVE-2026-66915)
CVE-2026-19089 Unrestricted File Upload in wordpress (CVE-2026-19089)
CVE-2026-16985 Unrestricted File Upload in wordpress (CVE-2026-16985)
CVE-2026-15038 Authentication Bypass in wordpress (CVE-2026-15038)
CVE-2026-42170 A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file...
CVE-2026-48120 Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kakoune and shell comma...
CVE-2026-46409 Code Injection in CVE-2026-46409 (CVE-2026-46409)
CVE-2026-64638 Cross-Site Scripting (XSS) in wordpress (CVE-2026-64638)
CVE-2026-68772 Unsafe Deserialization in CVE-2026-68772 (CVE-2026-68772)
CVE-2026-17603 Code Injection in CVE-2026-17603 (CVE-2026-17603)
CVE-2022-4995 Unrestricted File Upload in CVE-2022-4995 (CVE-2022-4995)
CVE-2026-54211 Out-of-Bounds Write in dos (CVE-2026-54211)
CVE-2026-54210 Out-of-Bounds Write in dos (CVE-2026-54210)
CVE-2026-54212 Out-of-Bounds Write in dos (CVE-2026-54212)
CVE-2026-16258 Unsafe Deserialization in wordpress (CVE-2026-16258)
CVE-2026-15215 Privilege Escalation in wordpress (CVE-2026-15215)
CVE-2026-70640 Vulnerability in cpp (CVE-2026-70640)
CVE-2026-5857 Out-of-Bounds Write in c (CVE-2026-5857)
CVE-2026-48080 Information Disclosure in ssrf (CVE-2026-48080)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →