RCE vulnerabilities