Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 1,234

ID Title
CVE-2026-58169 Vulnerability in CVE-2026-58169 (CVE-2026-58169)
CVE-2026-58116 Code Injection in hiyouga (CVE-2026-58116)
CVE-2026-53691 Unrestricted File Upload in CVE-2026-53691 (CVE-2026-53691)
CVE-2026-12240 Unsafe Deserialization in wordpress (CVE-2026-12240)
CVE-2026-34594 OS Command Injection in CVE-2026-34594 (CVE-2026-34594)
CVE-2026-34597 OS Command Injection in CVE-2026-34597 (CVE-2026-34597)
CVE-2026-57950 ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control...
CVE-2026-56285 Nitter's /video media proxy endpoint fails to validate target URLs against Twitter/X domains and...
CVE-2026-56290 KEV [KEV] Unrestricted File Upload in Joomlack page-builder-ck (CVE-2026-56290)
CVE-2026-40521 Path Traversal in path-traversal (CVE-2026-40521)
CVE-2026-13165 Unrestricted File Upload in CVE-2026-13165 (CVE-2026-13165)
CVE-2026-58049 FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...
CVE-2026-49869 OS Command Injection in kestra (CVE-2026-49869)
CVE-2026-32833 OS Command Injection in CVE-2026-32833 (CVE-2026-32833)
CVE-2026-52780 Vulnerability in CVE-2026-52780 (CVE-2026-52780)
CVE-2026-48090 Use-After-Free in dos (CVE-2026-48090)
CVE-2026-57518 Vulnerability in privilege-escalation (CVE-2026-57518)
CVE-2026-0685 Vulnerability in CVE-2026-0685 (CVE-2026-0685)
CVE-2026-48706 Vulnerability in envoyproxy (CVE-2026-48706)
CVE-2026-57315 Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.
CVE-2025-71338 Vulnerability in path-traversal (CVE-2025-71338)
CVE-2025-71334 Vulnerability in flowiseai (CVE-2025-71334)
CVE-2025-71336 OS Command Injection in flowiseai (CVE-2025-71336)
CVE-2025-71333 Vulnerability in path-traversal (CVE-2025-71333)
CVE-2026-56766 Vulnerability in CVE-2026-56766 (CVE-2026-56766)
CVE-2026-54088 OS Command Injection in CVE-2026-54088 (CVE-2026-54088)
CVE-2026-50549 Vulnerability in anysphere (CVE-2026-50549)
CVE-2026-50548 Path Traversal in anysphere (CVE-2026-50548)
CVE-2026-55413 Code Injection in CVE-2026-55413 (CVE-2026-55413)
CVE-2026-56049 Contributor Remote Code Execution (RCE) in Post Snippets <= 4.0.19 versions.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →