PT-2026-60930 · Vmware · Avi Load Balancer

CVE-2026-47868 · Published 2026-07-18 · Updated 2026-07-18

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Avi Load Balancer version 32.1.1 VMware Avi Load Balancer versions 31.1.1 through 31.2.2 VMware Avi Load Balancer versions 30.1.1 through 30.2.6 VMware Avi Load Balancer versions 22.1.1 through 22.1.7

Description A local privilege escalation issue exists where a malicious user with local access may be able to elevate their privileges to execute code as root.

Recommendations Update version 32.1.1 to 32.1.2. Update versions 31.1.1 through 31.2.2 to 31.2.2-2p3. Update versions 30.1.1 through 30.2.6 to 30.2.7. Update versions 22.1.1 through 22.1.7 to 30.2.7.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-47868

Affected Products

Avi Load Balancer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-47868 · Security Note
• https://twitter.com/vulnipulse/status/2078409602748882973 · Twitter Post
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926 · Note