Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 2,172

ID Title
CVE-2026-18022 Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to...
CVE-2026-12357 Vulnerability in CVE-2026-12357 (CVE-2026-12357)
CVE-2026-16328 In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address...
CVE-2026-12935 Vulnerability in dos (CVE-2026-12935)
CVE-2026-41939 Vulnerability in CVE-2026-41939 (CVE-2026-41939)
CVE-2026-14266 Vulnerability in 7-zip (CVE-2026-14266)
CVE-2026-67192 Vulnerability in CVE-2026-67192 (CVE-2026-67192)
CVE-2026-65885 Unrestricted File Upload in balbooa (CVE-2026-65885)
CVE-2026-14270 Unrestricted File Upload in wordpress (CVE-2026-14270)
CVE-2026-65883 Unsafe Deserialization in aimy-extensions (CVE-2026-65883)
CVE-2026-14900 Code Injection in wordpress (CVE-2026-14900)
CVE-2026-13423 Code Injection in wordpress (CVE-2026-13423)
CVE-2026-12476 Unrestricted File Upload in wordpress (CVE-2026-12476)
CVE-2026-14976 Vulnerability in ibm (CVE-2026-14976)
CVE-2026-50738 Use-After-Free in enterprisedb (CVE-2026-50738)
CVE-2026-66748 Code Injection in CVE-2026-66748 (CVE-2026-66748)
CVE-2026-51270 Vulnerability in privilege-escalation (CVE-2026-51270)
CVE-2026-65880 Code Injection in CVE-2026-65880 (CVE-2026-65880)
CVE-2026-11756 Unsafe Deserialization in deserialization (CVE-2026-11756)
CVE-2026-16585 Path Traversal in wordpress (CVE-2026-16585)
CVE-2026-66398 Vulnerability in CVE-2026-66398 (CVE-2026-66398)
CVE-2026-63077 KEV [KEV] Unsafe Deserialization in Jetbrains teamcity (CVE-2026-63077)
CVE-2025-50455 SQL Injection in sqli (CVE-2025-50455)
CVE-2026-59250 Vulnerability in c (CVE-2026-59250)
CVE-2026-16554 Vulnerability in c (CVE-2026-16554)
CVE-2026-14289 Code Injection in wordpress (CVE-2026-14289)
CVE-2026-13714 Unrestricted File Upload in wordpress (CVE-2026-13714)
CVE-2026-17497 OS Command Injection in notegen (CVE-2026-17497)
CVE-2026-63720 Code Injection in CVE-2026-63720 (CVE-2026-63720)
CVE-2026-16766 OS Command Injection in CVE-2026-16766 (CVE-2026-16766)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →