8.3
High
CVE-2026-47866 VMware Avi Load Balancer contains an authorization bypass vulnerability
Description
VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Avi Load Balancer | 32.1.1 | No fix stated |
| Avi Load Balancer 31.1 | 31.1.1 → 31.2.2 | No fix stated |
| Avi Load Balancer 30.1 | 30.1.1 → 30.2.6 | No fix stated |
| Avi Load Balancer 22.1 | 22.1.1 → 22.1.7 | No fix stated |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of Avi Load Balancer
The 8 CVEs of Avi Load Balancer →
CVE-2026-47871
VMware Avi Load Balancer contains a directory traversal vulnerability
8.8
High
CVE-2026-47870
VMware Avi Load Balancer contains a privilege escalation vulnerability
7.1
High
CVE-2026-47869
VMware Avi Load Balancer contains a remote code execution vulnerability
8.7
High
CVE-2026-47868
VMware Avi Load Balancer contains a local privilege escalation vulnerability
7.8
High