Vulnerabilities

CVSS

8.3 High

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Risk score

66.4

Published

2026-07-18

Status

Published

VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Weaknesses

CWE-863

Coverage 1

vulnerability

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer

Broadcom has released updates to patch seven critical and high-severity vulnerabilities in VMware Avi Load Balancer. These flaws could allow attackers to bypass authentication, execute code, and escalate privileges, posi…

SecurityWeek · Jul 14, 2026 High

CVE-2026-47865CVE-2026-47866CVE-2026-47867vulnerabilityload balancingauthentication

All articles mentioning it

Advisories and references

• support.broadcom.com/web/ecx/support-content-notification/-/external...