Avi Load Balancer
Monthly
Directory traversal in VMware Avi Load Balancer (formerly Avi Networks NSX Advanced Load Balancer) lets authenticated network users bypass file path validation to reach files outside intended directories. Rated CVSS 8.8, the flaw is exploitable remotely by any authenticated user (PR:L) and the vendor scores full high confidentiality, integrity, and availability impact, implying potential arbitrary file read and/or write on the appliance. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege escalation leading to remote code execution in VMware (Broadcom) Avi Load Balancer allows an authenticated user with network access to elevate privileges and run arbitrary code on the appliance. The flaw affects the 22.1.x, 30.x, 31.x and 32.1.x branches and is resolved in vendor-released builds. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, low-complexity nature combined with a CWE-269 privilege-management root cause makes it a meaningful post-authentication threat.
Remote code execution in VMware Avi Load Balancer (versions 22.1.x, 30.1.x/30.2.x, 31.1.x/31.2.x, and 32.1.1) allows an authenticated, high-privileged user with network access to inject and execute arbitrary code (CWE-94). Broadcom/VMware disclosed the flaw with a CVSS 3.1 score of 8.7 and a scope-changed vector, meaning successful exploitation can affect components beyond the vulnerable module. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network attack vector and low attack complexity make it a meaningful priority for exposed management interfaces.
Local privilege escalation in VMware (Broadcom) Avi Load Balancer allows a user who already has local access to the appliance to elevate to root and run arbitrary code. It affects the 22.1.x, 30.x, 31.x and 32.1.x release lines, is CVSS 7.8, and was reported by the vendor. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in VMware (Broadcom) Avi Load Balancer allows a network-adjacent, high-privileged user to reach the Avi Control plane and run arbitrary code, per Broadcom advisory 0/37926. The flaw is a CWE-94 code injection carrying a CVSS 3.1 score of 8.7 with a changed scope, meaning a control-plane compromise can cascade beyond the immediately vulnerable component. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the network attack vector and low complexity make it a meaningful patch priority for exposed management planes.
Authorization bypass in VMware Avi Load Balancer (branches 22.1.x, 30.x, 31.x, and 32.1.1) allows a network-based actor holding low-privilege credentials to reach a limited subset of the Avi Control Plane without proper authorization. Rated CVSS 8.3 by VMware/Broadcom with CWE-863 (Incorrect Authorization), the flaw exposes control-plane functionality that should be gated behind higher authorization. There is no public exploit identified at time of analysis and no CISA KEV listing, so exploitation is currently theoretical rather than observed.
Authentication bypass in VMware Avi Load Balancer (versions 22.1.1-22.1.7, 30.1.1-30.2.6, and 31.1.1-31.2.2) lets a network-adjacent attacker circumvent the login mechanism and reach the Avi Controller control plane. Reported by VMware/Broadcom, it carries a CVSS 9.8 (AV:N/AC:L/PR:N/UI:N) reflecting full unauthenticated compromise of confidentiality, integrity and availability. No public exploit is identified at time of analysis and it is not on the CISA KEV list, but the flaw class (CWE-287) and network-reachable admin plane make it a high-priority patch.
Directory traversal in VMware Avi Load Balancer (formerly Avi Networks NSX Advanced Load Balancer) lets authenticated network users bypass file path validation to reach files outside intended directories. Rated CVSS 8.8, the flaw is exploitable remotely by any authenticated user (PR:L) and the vendor scores full high confidentiality, integrity, and availability impact, implying potential arbitrary file read and/or write on the appliance. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Privilege escalation leading to remote code execution in VMware (Broadcom) Avi Load Balancer allows an authenticated user with network access to elevate privileges and run arbitrary code on the appliance. The flaw affects the 22.1.x, 30.x, 31.x and 32.1.x branches and is resolved in vendor-released builds. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-reachable, low-complexity nature combined with a CWE-269 privilege-management root cause makes it a meaningful post-authentication threat.
Remote code execution in VMware Avi Load Balancer (versions 22.1.x, 30.1.x/30.2.x, 31.1.x/31.2.x, and 32.1.1) allows an authenticated, high-privileged user with network access to inject and execute arbitrary code (CWE-94). Broadcom/VMware disclosed the flaw with a CVSS 3.1 score of 8.7 and a scope-changed vector, meaning successful exploitation can affect components beyond the vulnerable module. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network attack vector and low attack complexity make it a meaningful priority for exposed management interfaces.
Local privilege escalation in VMware (Broadcom) Avi Load Balancer allows a user who already has local access to the appliance to elevate to root and run arbitrary code. It affects the 22.1.x, 30.x, 31.x and 32.1.x release lines, is CVSS 7.8, and was reported by the vendor. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in VMware (Broadcom) Avi Load Balancer allows a network-adjacent, high-privileged user to reach the Avi Control plane and run arbitrary code, per Broadcom advisory 0/37926. The flaw is a CWE-94 code injection carrying a CVSS 3.1 score of 8.7 with a changed scope, meaning a control-plane compromise can cascade beyond the immediately vulnerable component. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV, but the network attack vector and low complexity make it a meaningful patch priority for exposed management planes.
Authorization bypass in VMware Avi Load Balancer (branches 22.1.x, 30.x, 31.x, and 32.1.1) allows a network-based actor holding low-privilege credentials to reach a limited subset of the Avi Control Plane without proper authorization. Rated CVSS 8.3 by VMware/Broadcom with CWE-863 (Incorrect Authorization), the flaw exposes control-plane functionality that should be gated behind higher authorization. There is no public exploit identified at time of analysis and no CISA KEV listing, so exploitation is currently theoretical rather than observed.
Authentication bypass in VMware Avi Load Balancer (versions 22.1.1-22.1.7, 30.1.1-30.2.6, and 31.1.1-31.2.2) lets a network-adjacent attacker circumvent the login mechanism and reach the Avi Controller control plane. Reported by VMware/Broadcom, it carries a CVSS 9.8 (AV:N/AC:L/PR:N/UI:N) reflecting full unauthenticated compromise of confidentiality, integrity and availability. No public exploit is identified at time of analysis and it is not on the CISA KEV list, but the flaw class (CWE-287) and network-reachable admin plane make it a high-priority patch.