Vulnerabilities

CVSS

8.7 High

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Risk score

69.6

Published

2026-07-18

Status

Published

VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane and execute code remotely. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Weaknesses

CWE-94

Coverage 1

vulnerability

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer

Broadcom has released updates to patch seven critical and high-severity vulnerabilities in VMware Avi Load Balancer. These flaws could allow attackers to bypass authentication, execute code, and escalate privileges, posi…

SecurityWeek · Jul 14, 2026 High

CVE-2026-47865CVE-2026-47866CVE-2026-47867vulnerabilityload balancingauthentication

All articles mentioning it

Advisories and references

• support.broadcom.com/web/ecx/support-content-notification/-/external...