security//remote code execution

Remote code execution (RCE) is a class of vulnerability impact in which an attacker makes a target system execute attacker-controlled code across a network boundary, whatever the particular bug that opens the way.

Remote code execution (RCE) is a class of vulnerability impact in which an attacker makes a target system execute attacker-controlled code across a network boundary, whatever the particular bug that opens the way.

RCE is severe because code execution can become the first foothold in a longer chain. The initial process may still be sandboxed or low privilege, so consequences depend on accessible secrets, network position and available escalation paths: limited authority invites privilege escalation, and the network position and credentials gained can open lateral movement to other systems. Code having run and the machine being fully controlled are two different outcomes.

The first shell is often the beginning of the incident, not the end.