CVEvulnerability

CVE-2026-47868

7.8 HIGH Published 2026-07-18 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-18
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269

Description

VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate their privileges to run code as root. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Affected configurations

• broadcom vmware avi load balancer (>= 22.1.1 <= 22.1.7) • broadcom vmware avi load balancer (>= 30.1.1 < 30.2.7) • broadcom vmware avi load balancer (>= 31.1.1 < 31.2.2) • broadcom vmware avi load balancer 31.2.2 • broadcom vmware avi load balancer 32.1.1

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References