CVE-2026-47871
HIGH
CVSS 8.8
avi_load_balancer
Verified Advisory
Directory traversal in VMware Avi Load Balancer (CVE-2026-47871)
CVE-2026-47871 is a directory traversal vulnerability in VMware Avi Load Balancer caused by flaws in file path validation. Malicious authenticated network users can exploit this vulnerability to perform directory traversal attacks against affected systems.
Affected versions:
- 32.1.1
We recommend updating to: 32.1.2, 31.2.2-2p3, 30.2.7.
CVSS 8.8 · our assessment: this_week
Vendor advisory: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
Details: https://vuln.today/cve/CVE-2026-47871
Verified by vuln.today against published advisories.
Affected versions
- – 32.1.1
Fixed in: 32.1.2; 31.2.2-2p3; 30.2.7
More advisories for avi_load_balancer
- CVE-2026-47869 – Remote code execution in VMware Avi Load Balancer (CVE-2026-47869)
- CVE-2026-47870 – Privilege escalation in VMware Avi Load Balancer (CVE-2026-47870)
- CVE-2026-47868 – Local privilege escalation in VMware Avi Load Balancer (CVE-2026-47868)
- CVE-2026-47867 – Remote code execution in VMware Avi Load Balancer (CVE-2026-47867)
- CVE-2026-47866 – Authorization bypass in VMware Avi Load Balancer (CVE-2026-47866)