PT-2026-60929 · Vmware · Avi Load Balancer

CVE-2026-47867 · Published 2026-07-18 · Updated 2026-07-18

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions VMware Avi Load Balancer versions prior to 32.1.2 VMware Avi Load Balancer versions 31.1.1 through 31.2.2 VMware Avi Load Balancer versions 30.1.1 through 30.2.6 VMware Avi Load Balancer versions 22.1.1 through 22.1.7

Description A remote code execution issue exists where a malicious user with network access can access the Avi Control plane to execute arbitrary code remotely.

Recommendations Update to version 32.1.2. Update to version 31.2.2-2p3. Update to version 30.2.7. Update to version 30.2.7.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-47867

Affected Products

Avi Load Balancer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-47867 · Security Note
• https://twitter.com/vulnipulse/status/2078409852658008350 · Twitter Post
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926 · Note