CVE-2026-47866Patch(broadcom / vmware_avi_load_balancer)

LOWCVSS 8.3 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

Patch broadcom vmware_avi_load_balancer systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

broadcom CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

vmware_avi_load_balancer

Threat summary

Patch or workaround signal is available
5 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 4 signals
Technical details provided in 4 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked at 4 mentions on most recent observed day (2026-07-18)
5 total mentions across 2 days

Affected systems

Vendors

broadcom

Products

vmware_avi_load_balancer

2 versions affected across 1 product

Deep dive

Activity timeline5 mentions / 2d

Signal classification3 categories

Patch

360.0%

Disclosure

120.0%

General

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	1	Patch1
2026-07-18	4	Disclosure1General1Patch2

Full discourse5 posts

Autumn Good@autumn_good_3592d
Patch
VMSA-2026-0005: VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871) https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
Post summary
The advisory announces that VMware Avi Load Balancer has patched several vulnerabilities (CVE‑2026‑47865 through CVE‑2026‑47871).
00010485
6.9K followersView on X
ADK Cyber@ADKCyber88d
Patch
CVE-2026-47866 (CVSS 8.3): VMware Avi Load Balancer authorization bypass lets network actors reach limited control plane functions. Review deployments and apply fixes. http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability https://t.co/A41wsW2N6J
Post summary
The tweet highlights VMware Avi Load Balancer authorization bypass (CVE‑2026‑47866, CVSS 8.3) and advises reviewing deployments and applying available fixes.
0000067
89 followersView on X
Upwind Security MDR@UpwindMDR88d
Disclosure
🚨 HIGH - VMware Avi Load Balancer authorization bypass in Avi Control Plane (CVE-2026-47866) VMware Avi Load Balancer contains an authorization bypass in the Avi Control Plane that lets an unauthenticated network actor reach a limited subset of control plane functionality. The root cause is an authorization enforcement flaw (improper access control) where requests can bypass expected permission checks. An attacker exploits this over the network by sending crafted requests to exposed control plane endpoints without needing valid credentials, assuming the management plane is reachable. Impact includes unauthorized access to management capabilities and sensitive control plane data, potentially enabling further compromise of the load balancing environment. 👉 Affected: VMware Avi Load Balancer 32.1.1, 31.1.1–31.2.2, 30.1.1–30.2.6, 22.1.1–22.1.7 | Upgrade to 32.1.2 / 31.2.2-2p3 / 30.2.7
Post summary
The post announces a high‑severity authorization bypass in VMware Avi Load Balancer’s control plane, detailing the root cause, impact, and advising users to upgrade to patched versions.
0000079
254 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds89d
General
CVE-2026-47866 Authorization Bypass in VMware Avi Load Balancer Control Plane Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47866
Post summary
The text identifies CVE‑2026‑47866 as an authorization bypass in VMware Avi Load Balancer but provides no PoC, exploit code, active exploitation evidence, or patch details, offering only a minimal technical description.
00000109
4.1K followersView on X
VulniPulse@vulnipulse89d
Patch
⚠️ VMware Avi Load Balancer alert: CVE-2026-47866 (CVSS 8.3) A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/vmware-cve-2026-47866 #VMware #CyberSecurity #CVE
Post summary
The advisory for CVE‑2026‑47866 highlights an unauthorized access issue in VMware Avi Load Balancer and recommends upgrading, but offers no PoC or exploit details.
0000053
6 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	broadcom	vmware_avi_load_balancer	-	-	-
App	broadcom	vmware_avi_load_balancer	31.2.2	-	-
App	broadcom	vmware_avi_load_balancer	31.2.2	-	-
App	broadcom	vmware_avi_load_balancer	31.2.2	-	-
App	broadcom	vmware_avi_load_balancer	32.1.1	-	-

Explore more

Back to dashboard broadcom CVEs vmware_avi_load_balancer vulnerabilities

What researchers are saying

CVE-2026-47866

ADK Cyber[verified]@ADKCyberPatch

The tweet highlights VMware Avi Load Balancer authorization bypass (CVE‑2026‑47866, CVSS 8.3) and advises reviewing deployments and applying available fixes.

Upwind Security MDR[verified]@UpwindMDRDisclosure

The post announces a high‑severity authorization bypass in VMware Avi Load Balancer’s control plane, detailing the root cause, impact, and advising users to upgrade to patched versions.

VulniPulse[verified]@vulnipulsePatch

The advisory for CVE‑2026‑47866 highlights an unauthorized access issue in VMware Avi Load Balancer and recommends upgrading, but offers no PoC or exploit details.

Autumn Good@autumn_good_35Patch

The advisory announces that VMware Avi Load Balancer has patched several vulnerabilities (CVE‑2026‑47865 through CVE‑2026‑47871).

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The text identifies CVE‑2026‑47866 as an authorization bypass in VMware Avi Load Balancer but provides no PoC, exploit code, active exploitation evidence, or patch details, offering only a minimal technical description.