9.8
Critical
CVE-2026-47865 VMware Avi Load Balancer contains an authentication bypass vulnerability
Description
VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Avi Load Balancer 31.1 | 31.1.1 → 31.2.2 | No fix stated |
| Avi Load Balancer 30.1 | 30.1.1 → 30.2.6 | No fix stated |
| Avi Load Balancer 22.1 | 22.1.1 → 22.1.7 | No fix stated |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of Avi Load Balancer
The 8 CVEs of Avi Load Balancer →
CVE-2026-47871
VMware Avi Load Balancer contains a directory traversal vulnerability
8.8
High
CVE-2026-47870
VMware Avi Load Balancer contains a privilege escalation vulnerability
7.1
High
CVE-2026-47869
VMware Avi Load Balancer contains a remote code execution vulnerability
8.7
High
CVE-2026-47868
VMware Avi Load Balancer contains a local privilege escalation vulnerability
7.8
High