CVE-2026-47870
HIGH
CVSS 7.1
avi_load_balancer
Verified Advisory
Privilege escalation in VMware Avi Load Balancer (CVE-2026-47870)
CVE-2026-47870 is a privilege escalation vulnerability in VMware Avi Load Balancer. A malicious authenticated user with network access may be able to execute remote code. Broadcom has evaluated the severity as Important with a maximum CVSSv3 base score of 7.1.
Affected versions:
- 32.1.1
We recommend updating to: 32.1.2, 31.2.2-2p3, 30.2.7.
CVSS 7.1 · our assessment: this_week
Vendor advisory: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
Details: https://vuln.today/cve/CVE-2026-47870
Verified by vuln.today against published advisories.
Affected versions
- – 32.1.1
Fixed in: 32.1.2; 31.2.2-2p3; 30.2.7
More advisories for avi_load_balancer
- CVE-2026-47871 – Directory traversal in VMware Avi Load Balancer (CVE-2026-47871)
- CVE-2026-47869 – Remote code execution in VMware Avi Load Balancer (CVE-2026-47869)
- CVE-2026-47868 – Local privilege escalation in VMware Avi Load Balancer (CVE-2026-47868)
- CVE-2026-47867 – Remote code execution in VMware Avi Load Balancer (CVE-2026-47867)
- CVE-2026-47866 – Authorization bypass in VMware Avi Load Balancer (CVE-2026-47866)