Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 6 total.
Directory traversal in VMware Avi Load Balancer (CVE-2026-47871)
CVE-2026-47871 is a directory traversal vulnerability in VMware Avi Load Balancer caused by flaws in file path validation. Malicious authenticated network users can exploit this vulnerability to perform directory trav...
Fixed in 32.1.2; 31.2.2-2p3; 30.2.7
Remote code execution in VMware Avi Load Balancer (CVE-2026-47869)
CVE-2026-47869 is a remote code execution vulnerability in VMware Avi Load Balancer. A malicious authenticated user with network access may be able to inject and execute code. Broadcom has rated this vulnerability in ...
Fixed in 32.1.2; 31.2.2-2p3; 30.2.7
Privilege escalation in VMware Avi Load Balancer (CVE-2026-47870)
CVE-2026-47870 is a privilege escalation vulnerability in VMware Avi Load Balancer. A malicious authenticated user with network access may be able to execute remote code. Broadcom has evaluated the severity as Importa...
Fixed in 32.1.2; 31.2.2-2p3; 30.2.7
Local privilege escalation in VMware Avi Load Balancer (CVE-2026-47868)
CVE-2026-47868 is a local privilege escalation vulnerability in VMware Avi Load Balancer. A malicious user with local access may be able to escalate their privileges to run code as root. Broadcom has evaluated the sev...
Fixed in 32.1.2; 31.2.2-2p3; 30.2.7
Remote code execution in VMware Avi Load Balancer (CVE-2026-47867)
CVE-2026-47867 is a remote code execution vulnerability in VMware Avi Load Balancer affecting the Avi Control plane. A malicious user with network access may be able to access the Avi Control plane and execute code re...
Fixed in 32.1.2; 31.2.2-2p3; 30.2.7
Authorization bypass in VMware Avi Load Balancer (CVE-2026-47866)
CVE-2026-47866 is an authorization bypass vulnerability in VMware Avi Load Balancer. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Broadcom has eva...
Fixed in 32.1.2; 31.2.2-2p3; 30.2.7