CVE-2026-47866 in Avi Load Balancer

Zusammenfassung

von MITRE • 18.07.2026

VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization.

Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Zuständig: Vmware
• Reservieren: 20.05.2026
• Veröffentlichung: 18.07.2026
• Moderieren: akzeptiert
• Eintrag: VDB-380032
• CPE: bereit
• CWE: CWE-639 (bestätigt)
• CVSS: 10.0 (VulDB)
• EPSS: 0.00000
• KEV: nein
• Aktivitäten: medium
• Sektor: Education, Telecommunication, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-47866
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-47866
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-47866/