CVE-2026-47867Patch(broadcom / vmware_avi_load_balancer)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch broadcom vmware_avi_load_balancer systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane and execute code remotely. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

broadcom CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

vmware_avi_load_balancer

Threat summary

Patch or workaround signal is available
6 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 5 signals
Technical details provided in 5 signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-07-18); latest day: 1
6 total mentions across 3 days

Affected systems

Vendors

broadcom

Products

vmware_avi_load_balancer

2 versions affected across 1 product

Deep dive

Activity timeline6 mentions / 3d

Signal classification2 categories

Patch

583.3%

General

116.7%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	1	Patch1
2026-07-18	4	General1Patch3
2026-08-02	1	Patch1

Full discourse6 posts

Autumn Good@autumn_good_3592d
Patch
VMSA-2026-0005: VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871) https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
Post summary
The text is a VMware security advisory announcing patches for multiple CVEs affecting the Avi Load Balancer, without providing PoC, exploit details, or evidence of active exploitation.
00010485
6.9K followersView on X
Smarteck 🇨🇱@Smarteck_cl73d
Patch
⚠️ Broadcom publico parches para siete vulnerabilidades severas en VMware Avi Load Balancer, afectando versiones 22.1.x a 32.1.x. La mas critica, CVE-2026-47865 con CVSS 9.8, permite a un atacante con acceso de red saltarse por completo la autenticacion y tomar control del Avi Control Plane, mientras CVE-2026-47867 habilita ejecucion remota de codigo con CVSS 8.7. No hay explotacion activa confirmada al momento de la publicacion, pero cualquier equipo que use este balanceador de carga en produccion deberia parchar de inmediato. https://www.securityweek.com/7-severe-vulnerabilities-patched-in-vmware-avi-load-balancer/ #VMware #Ciberseguridad #Vulnerabilidad Quieres conocer novedades tecnologicas? Sigue @smarteck_cl Tambien te seguiremos 🤝🏻
Post summary
Broadcom released patches for seven severe VMware Avi Load Balancer vulnerabilities, including CVE-2026-47865 and CVE-2026-47867, with no currently active exploitation reported; users are urged to apply the patches immediately.
0000052
1.9K followersView on X
ADK Cyber@ADKCyber88d
Patch
High-severity RCE in VMware Avi Load Balancer (CVE-2026-47867, CVSS 8.7). Review exposure and apply updates if using this product. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability https://t.co/BPjZIGxT6D
Post summary
VMware Avi Load Balancer is affected by CVE-2026-47867, a high‑score RCE vulnerability; users should review exposure and apply available patches.
0000064
89 followersView on X
Upwind Security MDR@UpwindMDR88d
Patch
🚨 HIGH - VMware Avi Load Balancer Control Plane Remote Code Execution (CVE-2026-47867) VMware Avi Load Balancer contains a remote code execution flaw in the Avi control plane that can be reached over the network. The root cause is improper control of code generation, enabling code injection in how the control plane processes attacker-influenced input. An attacker with network access to the Avi control plane can exploit this remotely without needing prior authentication in the vulnerable path, depending on exposure and access controls. Successful exploitation can lead to full remote code execution on the control plane, enabling takeover of load balancer management, configuration tampering, and potential lateral movement across managed application traffic. 👉 Affected: VMware Avi Load Balancer 32.1.1 | 31.1.1-31.2.2 | 30.1.1-30.2.6 | 22.1.1-22.1.7 | Upgrade to 32.1.2 / 31.2.2-2p3 / 30.2.7
Post summary
A remote code execution vulnerability (CVE-2026-47867) has been disclosed in VMware Avi Load Balancer Control Plane, and the advisory recommends upgrading to specific newer versions to mitigate the issue.
00000106
254 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds89d
General
CVE-2026-47867 Remote Code Execution in VMware Avi Load Balancer Control Plane A... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47867 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
An alert tweet references CVE-2026-47867, a Remote Code Execution vulnerability in VMware Avi Load Balancer Control Plane, linking to a details page but providing no additional exploitation or patch information.
00000106
4.1K followersView on X
VulniPulse@vulnipulse89d
Patch
⚠️ VMware Avi Load Balancer alert: CVE-2026-47867 (CVSS 8.7) Attackers could execute arbitrary code. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/vmware-cve-2026-47867 #VMware #AviLoadBalancer #RCE #CyberSecurity #CVE
Post summary
The advisory alerts to CVE‑2026‑47867, a high‑severity RCE in VMware Avi Load Balancer, and urges users to upgrade to the vendor‑released fix.
0000053
6 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	broadcom	vmware_avi_load_balancer	-	-	-
App	broadcom	vmware_avi_load_balancer	31.2.2	-	-
App	broadcom	vmware_avi_load_balancer	31.2.2	-	-
App	broadcom	vmware_avi_load_balancer	31.2.2	-	-
App	broadcom	vmware_avi_load_balancer	32.1.1	-	-

Explore more

Back to dashboard broadcom CVEs vmware_avi_load_balancer vulnerabilities

What researchers are saying

CVE-2026-47867

Smarteck 🇨🇱[verified]@Smarteck_clPatch

Broadcom released patches for seven severe VMware Avi Load Balancer vulnerabilities, including CVE-2026-47865 and CVE-2026-47867, with no currently active exploitation reported; users are urged to apply the patches immediately.

ADK Cyber[verified]@ADKCyberPatch

VMware Avi Load Balancer is affected by CVE-2026-47867, a high‑score RCE vulnerability; users should review exposure and apply available patches.

Upwind Security MDR[verified]@UpwindMDRPatch

A remote code execution vulnerability (CVE-2026-47867) has been disclosed in VMware Avi Load Balancer Control Plane, and the advisory recommends upgrading to specific newer versions to mitigate the issue.

VulniPulse[verified]@vulnipulsePatch

The advisory alerts to CVE‑2026‑47867, a high‑severity RCE in VMware Avi Load Balancer, and urges users to upgrade to the vendor‑released fix.

Autumn Good@autumn_good_35Patch

The text is a VMware security advisory announcing patches for multiple CVEs affecting the Avi Load Balancer, without providing PoC, exploit details, or evidence of active exploitation.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

An alert tweet references CVE-2026-47867, a Remote Code Execution vulnerability in VMware Avi Load Balancer Control Plane, linking to a details page but providing no additional exploitation or patch information.