security//remote code execution

Remote code execution (RCE) allows an attacker to make a target system execute attacker-controlled code across a network boundary. It is an impact class, not one particular bug.

Remote code execution (RCE) allows an attacker to make a target system execute attacker-controlled code across a network boundary. It is an impact class, not one particular bug.

RCE is severe because code execution can become the first foothold in a longer chain. The initial process may still be sandboxed or low privilege, so consequences depend on accessible secrets, network position and available escalation paths. “Code ran” and “the machine is fully controlled” are not synonyms.

The first shell is often the beginning of the incident, not the end.