CVE-2026-47866 - Vulnerability Details - OpenCVE

VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Vmware	Vmware Avi Load Balancer

No data.

No data.

References

Link	Providers
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926

History

Tue, 28 Jul 2026 20:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Vmware Vmware vmware Avi Load Balancer
Vendors & Products		Vmware Vmware vmware Avi Load Balancer

Mon, 20 Jul 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sat, 18 Jul 2026 09:15:00 +0000

Type	Values Removed	Values Added
Description		VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)
Title		VMware Avi Load Balancer Authorization Bypass Vulnerability
Weaknesses		CWE-863
References		https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
Metrics		cvssV3_1 `{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L'}`

MITRE

Status: PUBLISHED

Assigner: vmware

Published: 2026-07-18T08:57:08.170Z

Updated: 2026-07-23T03:56:16.450Z

Reserved: 2026-05-20T10:00:57.077Z

Link: CVE-2026-47866

Vulnrichment

Updated: 2026-07-20T15:22:51.967Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-47866", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "state": "PUBLISHED", "assignerShortName": "vmware", "dateReserved": "2026-05-20T10:00:57.077Z", "datePublished": "2026-07-18T08:57:08.170Z", "dateUpdated": "2026-07-23T03:56:16.450Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-07-18T08:57:08.170Z"}, "title": "VMware Avi Load Balancer Authorization Bypass Vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "description": "Incorrect Authorization", "type": "CWE", "cweId": "CWE-863"}]}], "impacts": [{"descriptions": [{"lang": "en", "value": "A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization."}]}], "affected": [{"vendor": "VMware", "product": "Avi Load Balancer", "versions": [{"version": "32.1.1", "status": "affected", "versionType": "custom"}, {"version": "31.1.1", "status": "affected", "versionType": "custom", "lessThanOrEqual": "31.2.2"}, {"version": "30.1.1", "status": "affected", "versionType": "custom", "lessThanOrEqual": "30.2.6"}, {"version": "22.1.1", "status": "affected", "versionType": "custom", "lessThanOrEqual": "22.1.7"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization.\n\nAffected versions:\n32.1.1 (fixed in 32.1.2)\n31.1.1 through 31.2.2 (fixed in 31.2.2-2p3)\n30.1.1 through 30.2.6 (fixed in 30.2.7)\n22.1.1 through 22.1.7 (fixed in 30.2.7)", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization.</p><p>Affected versions:</p><ul><li>32.1.1 (fixed in 32.1.2)</li><li>31.1.1 through 31.2.2 (fixed in 31.2.2-2p3)</li><li>30.1.1 through 30.2.6 (fixed in 30.2.7)</li><li>22.1.1 through 22.1.7 (fixed in 30.2.7)</li></ul>"}]}], "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "baseScore": 8.3, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "LOW"}}], "source": {"discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-22T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-47866"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-23T03:56:16.450Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-47866", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-20T15:22:29.091161Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-20T15:22:51.967Z"}}], "cna": {"title": "VMware Avi Load Balancer Authorization Bypass Vulnerability", "source": {"discovery": "UNKNOWN"}, "impacts": [{"descriptions": [{"lang": "en", "value": "A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization."}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "VMware", "product": "Avi Load Balancer", "versions": [{"status": "affected", "version": "32.1.1", "versionType": "custom"}, {"status": "affected", "version": "31.1.1", "versionType": "custom", "lessThanOrEqual": "31.2.2"}, {"status": "affected", "version": "30.1.1", "versionType": "custom", "lessThanOrEqual": "30.2.6"}, {"status": "affected", "version": "22.1.1", "versionType": "custom", "lessThanOrEqual": "22.1.7"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926"}], "descriptions": [{"lang": "en", "value": "VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization.\n\nAffected versions:\n32.1.1 (fixed in 32.1.2)\n31.1.1 through 31.2.2 (fixed in 31.2.2-2p3)\n30.1.1 through 30.2.6 (fixed in 30.2.7)\n22.1.1 through 22.1.7 (fixed in 30.2.7)", "supportingMedia": [{"type": "text/html", "value": "<p>VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization.</p><p>Affected versions:</p><ul><li>32.1.1 (fixed in 32.1.2)</li><li>31.1.1 through 31.2.2 (fixed in 31.2.2-2p3)</li><li>30.1.1 through 30.2.6 (fixed in 30.2.7)</li><li>22.1.1 through 22.1.7 (fixed in 30.2.7)</li></ul>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "Incorrect Authorization"}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2026-07-18T08:57:08.170Z"}}}, "cveMetadata": {"cveId": "CVE-2026-47866", "state": "PUBLISHED", "dateUpdated": "2026-07-23T03:56:16.450Z", "dateReserved": "2026-05-20T10:00:57.077Z", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "datePublished": "2026-07-18T08:57:08.170Z", "assignerShortName": "vmware"}, "dataVersion": "5.2"}