Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-66576: Remote Keyboard Desktop 1.0.1 - Malicious Code Can Run Remotely

CVE-2025-66576 · published 11 months ago

Summary

Remote Keyboard Desktop 1.0.1 allows hackers to run any command on your computer from anywhere. This is a serious risk because it means an attacker can gain control of your system. Update to the latest version to fix this vulnerability.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
remotecontrolio	remote keyboard desktop	1.0.1
remotecontrolio	remote_keyboard_desktop	1.0.1 `cpe:2.3:a:remotecontrolio:remote_keyboard_desktop:1.0.1:::::windows::`

Original advisory text

Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)

Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.

References

https://apps.microsoft.com/detail/9n0jw8v5sc9m?hl=neutral&gl=US&ocid=pdpshare Product
https://remotecontrolio.web.app/ Product
https://www.vulncheck.com/advisories/remote-keyboard-desktop-101-remote-code-exe... Third Party Advisory
https://www.exploit-db.com/exploits/52299 Exploit

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

8.9 High

Exploitation

1% chance of attack within 30 days

Type

CWE-78OS Command Injection

Timeline

Published4 Dec 2025

Updated4 Nov 2026

First seen14 Jul 2026

Sources

CVE-2025-66576 · NVD

CVE-2025-66576 · MITRE

Track software like this

Free during beta