RCS vulnerability