CVE-2025-66576

Critical · 9.8

CVSS

9.8

EPSS

1.3%

Published

Dec 4, 2025

CISA due date

—

The record

Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed