CVEvulnerability

CVE-2026-47866

8.3 HIGH Published 2026-07-18 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-18
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Weaknesses
CWE-863

Description

VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Affected configurations

• broadcom vmware avi load balancer (>= 22.1.1 <= 22.1.7) • broadcom vmware avi load balancer (>= 30.1.1 < 30.2.7) • broadcom vmware avi load balancer (>= 31.1.1 < 31.2.2) • broadcom vmware avi load balancer 31.2.2 • broadcom vmware avi load balancer 32.1.1

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References