← Back

CVE-2026-47867

nvd nist
Published: Jul 18, 2026Modified: Oct 24, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane and execute code remotely. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Affected (7)

Broadcom
1 product
Vmware Avi Load Balancer
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Broadcom
Vmware Avi Load Balancer
22.1.1 ≤ version ≤ 22.1.7
Vmware Avi Load Balancer
30.1.1 ≤ version < 30.2.7
Vmware Avi Load Balancer
31.1.1 ≤ version < 31.2.2
Vmware Avi Load Balancer
Version 31.2.2
Vmware Avi Load Balancer
Version 31.2.2 2p1
Vmware Avi Load Balancer
Version 31.2.2 2p2
Vmware Avi Load Balancer
Version 32.1.1

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.