What is the CVSS score of CVE-2026-47868?

CVE-2026-47868 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Avi Load Balancer are affected by CVE-2026-47868?

VMware Avi Load Balancer versions 22.1.x through 32.1.x contain a local privilege escalation vulnerability (CVE-2026-47868) enabling users with local appliance access to gain root privileges and…

How to fix or mitigate CVE-2026-47868?

Within 24 hours, audit all Avi Load Balancer instances to identify those running affected versions (22.1.x, 30.x, 31.x, 32.1.x) and document which personnel possess local administrative access. Within 7 days, enforce strict access controls limiting local console and SSH access to essential administrators only, revoke local login capabilities for unnecessary service accounts, and activate detailed audit logging for all local authentication attempts. Within 30 days, establish vendor monitoring for patch releases, evaluate upgrade pathways to unaffected version lines, and execute remediation immediately upon patch availability or plan controlled migration to newer release versions.

Avi Load Balancer CVE-2026-47868

EUVD-2026-45363 HIGH

Improper Privilege Management (CWE-269)

2026-07-18 vmware

GHSA-c9pv-gw7f-r9fm

VMware Privilege Escalation Avi Load Balancer

7.8

CVSS 3.1 · Vendor: vmware

Severity by source

Vendor (vmware) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (vmware) · only source for this CVE.

CVSS VectorVendor: vmware

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 18, 2026 - 09:32 vuln.today

CVE Published

Jul 18, 2026 - 08:57 cve.org

HIGH 7.8

DescriptionCVE.org

VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate their privileges to run code as root.

Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Articles & Coverage 1

News 7 New VMware Vulnerabilities - 1 Critical, 6 High Severity Jul 19, 2026

AnalysisAI

Local privilege escalation in VMware (Broadcom) Avi Load Balancer allows a user who already has local access to the appliance to elevate to root and run arbitrary code. It affects the 22.1.x, 30.x, 31.x and 32.1.x release lines, is CVSS 7.8, and was reported by the vendor. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, audit all Avi Load Balancer instances to identify those running affected versions (22.1.x, 30.x, 31.x, 32.1.x) and document which personnel possess local administrative access. …

Threat intelligence, references, and detailed analysis are available after sign-in.