CVE-2026-47867 HIGH CVSS 8.7 avi_load_balancer Verified Advisory

Remote code execution in VMware Avi Load Balancer (CVE-2026-47867)

Code Injection RCE VMware Avi Load Balancer

CVE-2026-47867 is a remote code execution vulnerability in VMware Avi Load Balancer affecting the Avi Control plane. A malicious user with network access may be able to access the Avi Control plane and execute code remotely. Broadcom has evaluated the severity as Important with a maximum CVSSv3 base score of 8.7. Affected versions: - 32.1.1 We recommend updating to: 32.1.2, 31.2.2-2p3, 30.2.7. CVSS 8.7 · our assessment: this_week Vendor advisory: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926 Details: https://vuln.today/cve/CVE-2026-47867

Verified by vuln.today against published advisories.

Affected versions

– 32.1.1

Fixed in: 32.1.2; 31.2.2-2p3; 30.2.7

Full CVE analysis Reference Published Jul 18, 2026

More advisories for avi_load_balancer

← All verified advisories