PT-2026-60928 · Vmware · Avi Load Balancer

CVE-2026-47866 · Published 2026-07-18 · Updated 2026-07-18

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions VMware Avi Load Balancer versions prior to 32.1.2 VMware Avi Load Balancer versions 31.1.1 through 31.2.2 VMware Avi Load Balancer versions 30.1.1 through 30.2.6 VMware Avi Load Balancer versions 22.1.1 through 22.1.7

Description An authorization bypass allows a malicious actor on the network to access a limited subset of the Avi Control Plane without proper authorization.

Recommendations Update to version 32.1.2. Update to version 31.2.2-2p3. Update to version 30.2.7. Update to version 30.2.7.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-47866

Affected Products

Avi Load Balancer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-47866 · Security Note
• https://twitter.com/vulnipulse/status/2078410186365300891 · Twitter Post
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926 · Note