Authorization bypass in VMware Avi Load Balancer (CVE-2026-47866)

CVE-2026-47866 is an authorization bypass vulnerability in VMware Avi Load Balancer. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Broadcom has evaluated the severity as Important with a maximum CVSSv3 base score of 8.3. Affected versions: - 32.1.1 We recommend updating to: 32.1.2, 31.2.2-2p3, 30.2.7. CVSS 8.3 · our assessment: this_week Vendor advisory: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926 Details: https://vuln.today/cve/CVE-2026-47866