Vulnerability · Published Dec 4, 2025 · Assigned by VulnCheck
CVE-2025-66576Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)
High 8.9
In plain English
A high-severity OS command injection in Remote Keyboard Desktop from Remotecontrolio. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).
Severity (CVSS 4.0)8.9High
Exploit odds (30 days)1.3%top 28.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Remotecontrolio | Remote Keyboard Desktop | 1.0.1 |
Weakness: CWE-78 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
References
- ExploitDB-52299 exploit
- Vendor Homepage product
- Software Link product
- https://www.vulncheck.com/advisories/remote-keyboard-desktop-101-remote-code-execution-rce third-party-advisory