Summaryinfo

A vulnerability, which was classified as critical, has been found in linkingvision rapidvms up to PR#95. The impacted element is an unknown function. Performing a manipulation results in memory corruption. This vulnerability is cataloged as CVE-2026-33847. The attack must be initiated from a local position. There is no exploit available. It is suggested to install a patch to address this issue.

Detailsinfo

A vulnerability was found in linkingvision rapidvms up to PR#95. It has been classified as critical. This affects an unknown functionality. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.This issue affects rapidvms: before PR#96.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-33847 since 03/24/2026. The exploitability is told to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-14746). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• linkingvision

Name

• rapidvms

Version

• PR#95

Website

• Product: https://github.com/linkingvision/rapidvms/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion