CVEvulnerability

CVE-2026-47871

8.8 HIGH Published 2026-07-18 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-18
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-22

Description

VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Affected configurations

• broadcom vmware avi load balancer (>= 22.1.1 <= 22.1.7) • broadcom vmware avi load balancer (>= 30.1.1 < 30.2.7) • broadcom vmware avi load balancer (>= 31.1.1 < 31.2.2) • broadcom vmware avi load balancer 31.2.2 • broadcom vmware avi load balancer 32.1.1

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References