Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

type:rce — CVE vulnerabilities tagged 15777

15777 CVE security advisories tagged "type:rce" with AI Chinese analysis, CVSS, references and POCs.

The tag "type:rce" identifies vulnerabilities classified as Remote Code Execution, a critical security flaw allowing attackers to execute arbitrary commands on a target system over a network without prior authentication. This class matters profoundly because it often grants full control over the affected machine, enabling data theft, system compromise, or lateral movement within an organization’s infrastructure. Typical scenarios involve exploiting flaws in web applications, network services, or APIs where input validation is insufficient, allowing malicious payloads to bypass security controls. With over twelve thousand such CVEs documented, RCE remains a persistent threat vector, highlighting the urgent need for rigorous input sanitization, secure coding practices, and continuous monitoring to prevent unauthorized access and mitigate severe operational disruptions across diverse digital environments.

CVE ID Title CVSS Severity Published
CVE-2026-43598 AMD ROCm RCCL输入验证漏洞致RCE — AMD Instinct™ MI210 CWE-822 7.7 High 2026-10-06
CVE-2026-106446 Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) — handlebars.js CWE-94 9.8 Critical 2026-10-06
CVE-2026-102165 Security Advisory 0198 — Wi-Fi Access Points CWE-121 7.5 High 2026-10-06
CVE-2026-102164 Security Advisory 0196 — Wi-Fi Access Points CWE-125 3.1 Low 2026-10-06
CVE-2026-102167 Security Advisory 0197 — Wi-Fi Access Points CWE-121 7.5 High 2026-10-06
CVE-2026-102163 Security Advisory 0195 — Wi-Fi Access Points CWE-787 8.8 High 2026-10-06
CVE-2026-102169 Security Advisory 0194 — Wi-Fi Access Points CWE-476 6.5 Medium 2026-10-06
CVE-2026-102162 Security Advisory 0193 — Wi-Fi Access Points CWE-121 8.8 High 2026-10-06
CVE-2026-102168 Security Advisory 0194 — Wi-Fi Access Points CWE-191 6.5 Medium 2026-10-06
CVE-2026-106445 Handlebars: JavaScript Injection via Own Property Check Bypass — handlebars.js CWE-184 9.2 Critical 2026-10-06
CVE-2026-106063 Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions — Red Hat Enterprise Linux 10 CWE-119 6.3 Medium 2026-10-06
CVE-2026-79810 Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager — ClearPass Policy Manager (CPPM) 7.2 High 2026-10-06
CVE-2026-76751 Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution — ClearPass Policy Manager (CPPM) 9.8 Critical 2026-10-06
CVE-2026-76745 Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S — AOS-Switch (AOS-S) 9.6 Critical 2026-10-06
CVE-2026-106513 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change — MISP CWE-284 6.9 Medium 2026-10-06
CVE-2026-106443 WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE — WeasyPrint CWE-20 8.8 High 2026-10-06
CVE-2026-96890 Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts — Enterprise Server CWE-918 8.7 High 2026-10-06
CVE-2026-106441 Hydra logging configuration permits unsafe callable resolution — hydra CWE-94 7.8 High 2026-10-06
CVE-2026-106440 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method — hydra CWE-470 7.8 High 2026-10-06
CVE-2026-106401 Chrome 155.0.8059.39前越界写入漏洞 — Chrome CWE-787 - - 2026-10-06
CVE-2026-106228 Chrome < 155.0.8059.39 Lens混淆副手漏洞 — Chrome CWE-441 - - 2026-10-06
CVE-2026-106414 Chrome Mobile iOS <155.0.8059.39 输入验证不当漏洞 — Chrome CWE-20 - - 2026-10-06
CVE-2026-106241 Chrome Android <155.0.8059.39 授权错误远程代码执行 — Chrome CWE-863 - - 2026-10-06
CVE-2026-106200 Google Chrome <155.0.8059.39 越界释放漏洞 — Chrome CWE-416 - - 2026-10-06
CVE-2026-106383 Chrome <155.0.8059.39 Media使用释放后漏洞 — Chrome CWE-416 - - 2026-10-06
CVE-2026-106298 Chrome < 155.0.8059.39 Mac 使用-after-free漏洞 — Chrome CWE-416 - - 2026-10-06
CVE-2026-106382 Chrome 155.0.8059.39前Chromecast Use-After-Free致代码执行 — Chrome CWE-416 - - 2026-10-06
CVE-2026-55330 Android蓝牙逻辑错误致远程代码执行漏洞 — Android - - 2026-10-06
CVE-2026-106118 ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write — ImageSharp CWE-787 7.5 High 2026-10-06
CVE-2026-105867 Payload: Client uploads could overwrite S3 objects — payload CWE-639 7.1 High 2026-10-06

Vulnerabilities classified as type:rce represent 15777 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.