CVEvulnerability

CVE-2026-47867

8.8 HIGH Published 2026-07-18 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-18
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94

Description

VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane and execute code remotely. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Affected configurations

• broadcom vmware avi load balancer (>= 22.1.1 <= 22.1.7) • broadcom vmware avi load balancer (>= 30.1.1 < 30.2.7) • broadcom vmware avi load balancer (>= 31.1.1 < 31.2.2) • broadcom vmware avi load balancer 31.2.2 • broadcom vmware avi load balancer 32.1.1

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References