CVE-2026-33847 | linkingvision rapidvms up to PR#95 memory corruption (EUVD-2026-14746)
VulDBArchived Mar 24, 2026✓ Full text saved
A vulnerability classified as critical was found in linkingvision rapidvms up to PR#95 . The affected element is an unknown function. Such manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-33847 . The attack must be carried out locally. There is no available exploit. Applying a patch is advised to resolve this issue.
Full text archived locally
✦ AI Summary· Claude Sonnet
VDB-352689 · CVE-2026-33847 · EUVD-2026-14746
LINKINGVISION RAPIDVMS UP TO PR#95 MEMORY CORRUPTION
HISTORYDIFFRELATEJSONXMLCTI
CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score
6.4 $0-$5k 3.81+
Summaryinfo
A vulnerability, which was classified as critical, has been found in linkingvision rapidvms up to PR#95. The impacted element is an unknown function. Performing a manipulation results in memory corruption. This vulnerability is cataloged as CVE-2026-33847. The attack must be initiated from a local position. There is no exploit available. It is suggested to install a patch to address this issue.
Detailsinfo
A vulnerability was found in linkingvision rapidvms up to PR#95. It has been classified as critical. This affects an unknown functionality. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.This issue affects rapidvms: before PR#96.
The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-33847 since 03/24/2026. The exploitability is told to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available.
Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com.
The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-14746).
Productinfo
Vendor
linkingvision
Name
rapidvms
Version
PR#95
Website
Product: https://github.com/linkingvision/rapidvms/
CPE 2.3info
🔒
CPE 2.2info
🔒
CVSSv4info
VulDB Vector: 🔒
VulDB Reliability: 🔍
CVSSv3info
VulDB Meta Base Score: 6.5
VulDB Meta Temp Score: 6.4
VulDB Base Score: 5.3
VulDB Temp Score: 5.1
VulDB Vector: 🔒
VulDB Reliability: 🔍
CNA Base Score: 7.8
CNA Vector (GovTech CSG): 🔒
CVSSv2info
Vector Complexity Authentication Confidentiality Integrity Availability
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Exploitinginfo
Class: Memory corruption
CWE: CWE-119
CAPEC: 🔒
ATT&CK: 🔒
Physical: Partially
Local: Yes
Remote: Partially
Availability: 🔒
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔒
0-Day Unlock Unlock Unlock Unlock
Today Unlock Unlock Unlock Unlock
Threat Intelligenceinfo
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍
Countermeasuresinfo
Recommended: Patch
Status: 🔍
0-Day Time: 🔒
Patch: github.com
Timelineinfo
03/24/2026 Advisory disclosed
03/24/2026 +0 days CVE reserved
03/24/2026 +0 days VulDB entry created
03/24/2026 +0 days VulDB entry last update
Sourcesinfo
Product: github.com
Advisory: github.com
Status: Confirmed
CVE: CVE-2026-33847 (🔒)
GCVE (CVE): GCVE-0-2026-33847
GCVE (VulDB): GCVE-100-352689
EUVD: 🔒
Entryinfo
Created: 03/24/2026 07:33
Updated: 03/24/2026 08:14
Changes: 03/24/2026 07:33 (63), 03/24/2026 08:14 (1)
Complete: 🔍
Cache ID: 99:810:101
Discussion
No comments yet. Languages: en.
Please log in to comment.
◂ PreviousOverviewNext ▸