CVE-2026-47870

Published: Jul 18, 2026Modified: Aug 20, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able to execute remote code. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Affected (7)

Products: Broadcom: Vmware Avi Load Balancer

Broadcom

1 product

Vmware Avi Load Balancer

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Broadcom Vmware Avi Load Balancer	From 22.1.1 to 22.1.7
Broadcom Vmware Avi Load Balancer	From 30.1.1 to 30.2.7
Broadcom Vmware Avi Load Balancer	From 31.1.1 to 31.2.2
Broadcom Vmware Avi Load Balancer	Version 31.2.2
Broadcom Vmware Avi Load Balancer	Version 31.2.2 2p1
Broadcom Vmware Avi Load Balancer	Version 31.2.2 2p2
Broadcom Vmware Avi Load Balancer	Version 32.1.1

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926

Source: security@vmware.com

Vendor Advisory

Timeline

No history available yet.