CVE-2026-47865
CRITICAL
INFO
Priority: 0.06
BB Relevance:
80/100
Published: 2026-07-18
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)
Weakness Classification (1)
Affected Software (18)
| Vendor | Product | Version |
|---|---|---|
| broadcom | vmware_avi_load_balancer | 22.1.1 – 22.1.7 |
| broadcom | vmware_avi_load_balancer | 30.1.1 – 30.2.7 |
| broadcom | vmware_avi_load_balancer | 31.1.1 – 31.2.2 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 31.2.2 |
| broadcom | vmware_avi_load_balancer | 31.2.2 |
| broadcom | vmware_avi_load_balancer | 31.2.2 |
| broadcom | vmware_avi_load_balancer | 32.1.1 |
References & Advisories (1)
Vendor Advisory