CVEvulnerability

CVE-2026-47865

9.8 CRITICAL Published 2026-07-18 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-18
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287

Description

VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Affected configurations

• broadcom vmware avi load balancer (>= 22.1.1 < 22.1.7) • broadcom vmware avi load balancer (>= 30.1.1 < 30.2.7) • broadcom vmware avi load balancer (>= 31.1.1 < 31.2.2) • broadcom vmware avi load balancer 22.1.7 • broadcom vmware avi load balancer 31.2.2 • broadcom vmware avi load balancer 32.1.1

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References