Two High-Severity Buffer Overflow Flaws Disclosed in LinkingVision rapidvms
Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen Mar 24, 2026
Two high-severity vulnerabilities, CVE-2026-33848 and CVE-2026-33849, were disclosed in LinkingVision rapidvms, both classified as CWE-119 improper restriction of operations within the bounds of a memory buffer. The flaws affect rapidvms versions before PR#96 and carry the same CVSS v3.1 vector, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network-reachable exploitation with low attack complexity, no required privileges, user interaction, and potential for high impact across confidentiality, integrity, and availability.
Both CVE records point to GitHub pull request #96 in the linkingvision/rapidvms repository as the referenced fix or related remediation. Organizations running vulnerable rapidvms builds should review the changes in that pull request, identify any exposed instances, and prioritize upgrading or patching affected systems because successful exploitation could lead to severe compromise of the video management platform.
