CVE-2025-66576 HIGH

CVE-2025-66576: Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)

Vendor Remotecontrolio
Product Remote Keyboard Desktop
Weakness CWE-78
Published December 4, 2025
Last update April 7, 2026

CVSS base score

8.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.

Key dates

02Disclosure timeline

December 4, 2025 CVE published
April 7, 2026 Record updated