PT-2026-60427 · Vmware · Avi Load Balancer

CVE-2026-47870 · Published 2026-07-16 · Updated 2026-07-18

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions VMware Avi Load Balancer version 32.1.1 VMware Avi Load Balancer versions 31.1.1 through 31.2.2 VMware Avi Load Balancer versions 30.1.1 through 30.2.6 VMware Avi Load Balancer versions 22.1.1 through 22.1.7

Description An authenticated user with network access can escalate privileges, which may allow for the execution of remote code.

Recommendations Update version 32.1.1 to 32.1.2. Update versions 31.1.1 through 31.2.2 to 31.2.2-2p3. Update versions 30.1.1 through 30.2.6 to 30.2.7. Update versions 22.1.1 through 22.1.7 to 30.2.7.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-47870

Affected Products

Avi Load Balancer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-47870 · Security Note
• https://twitter.com/vulnipulse/status/2078409102091587714 · Twitter Post
• https://twitter.com/juy_lang/status/2077622425232269591 · Twitter Post
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926 · Note