CVE-2026-47869Patch(broadcom / vmware_avi_load_balancer)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch broadcom vmware_avi_load_balancer systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able to inject and execute code. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

broadcom CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

vmware_avi_load_balancer

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
7 mentions across 5 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 5 signals
Technical details provided in 4 signals
Disclosure: 3 classified signals
Peaked 2d ago at 3 mentions (2026-07-18); latest day: 1
7 total mentions across 5 days

Affected systems

Vendors

broadcom

Products

vmware_avi_load_balancer

2 versions affected across 1 product

Deep dive

Activity timeline7 mentions / 5d

Signal classification2 categories

Patch

457.1%

Disclosure

342.9%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	1	Patch1
2026-07-16	1	Patch1
2026-07-18	3	Disclosure2Patch1
2026-07-19	1	Patch1
2026-07-24	1	Disclosure1

Full discourse7 posts

Juy Lang@juy_lang91d
Patch
Vulnerabilities 0Day - CVE-2026-47869, CVE-2026-47870, CVE-2026-47871 affect VMware AVI Load Balancer during my research security. System Administrators need to upgrade to quickly resolve this issue. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
Post summary
The advisory highlights three newly identified zero‑day CVEs affecting VMware AVI Load Balancer and urges administrators to upgrade promptly to mitigate the risk.
10090678
135 followersView on X
ExploitGrid@exploitgrid87d
Patch
🚨 VMware Avi Load Balancer hit with critical bugs: CVE-2026-47869/47867 (auth'd RCE), CVE-2026-47868 (local priv-esc to root), CVE-2026-47865/47866 (auth/authz bypass). Also: CVE-2026-53994 ProFTPD heap overflow. Patch now. Details http://exploitgrid.net #CVE #InfoSec
Post summary
The tweet discloses multiple critical VMware Avi Load Balancer and ProFTPD vulnerabilities, notes that patches are available, and provides a link to additional exploit details.
0101055
26 followersView on X
Autumn Good@autumn_good_3591d
Patch
VMSA-2026-0005: VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871) https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
Post summary
VMware Avi Load Balancer’s VMSA‑2026‑0005 provides patches for multiple CVEs, with no PoC, exploit code, or evidence of active exploitation.
00010485
6.9K followersView on X
CERT-PY@CERTpy82d
Disclosure
⚠️ Vulnerabilidades en productos VMware ❗ CVE-2026-47871 ❗ CVE-2026-47869 ❗ CVE-2026-47865 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-vmware-6/ https://t.co/Mp2j9dqAcM
Post summary
A tweet announces three VMware product vulnerabilities (CVE-2026-47871, CVE-2026-47869, CVE-2026-47865) and links to external resources for more information.
00000185
6.7K followersView on X
ADK Cyber@ADKCyber88d
Disclosure
VMware Avi Load Balancer CVE-2026-47869 (CVSS 8.7) allows RCE for authenticated users on v32.1.1. Check and apply fixes: https://nvd.nist.gov/vuln/detail/CVE-2026-47869 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/MJ2ShyFVMB
Post summary
The tweet discloses a high‑severity RCE vulnerability (CVSS 8.7) in VMware Avi Load Balancer v32.1.1 and urges users to check NVD for available fixes.
00000179
89 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds89d
Disclosure
CVE-2026-47869 Remote Code Execution in VMware Avi Load Balancer via Authenticated Code Injection https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47869
Post summary
The post announces CVE-2026-47869 as an Authenticated Code Injection RCE in VMware Avi Load Balancer, but provides no details on patches, exploits, or active attacks.
00000102
4.1K followersView on X
VulniPulse@vulnipulse89d
Patch
⚠️ VMware Avi Load Balancer alert: CVE-2026-47869 (CVSS 8.7) Authenticated attackers could execute arbitrary code. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/vmware-cve-2026-47869 #VMware #AviLoadBalancer #RCE #CyberSecurity #CVE
Post summary
The post announces CVE‑2026‑47869, emphasizes the need to install the vendor’s fixed release, and includes basic CVE details but offers no exploit or PoC information.
0000047
6 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	broadcom	vmware_avi_load_balancer	-	-	-
App	broadcom	vmware_avi_load_balancer	31.2.2	-	-
App	broadcom	vmware_avi_load_balancer	31.2.2	-	-
App	broadcom	vmware_avi_load_balancer	31.2.2	-	-
App	broadcom	vmware_avi_load_balancer	32.1.1	-	-

Explore more

Back to dashboard broadcom CVEs vmware_avi_load_balancer vulnerabilities

What researchers are saying

CVE-2026-47869

ADK Cyber[verified]@ADKCyberDisclosure

The tweet discloses a high‑severity RCE vulnerability (CVSS 8.7) in VMware Avi Load Balancer v32.1.1 and urges users to check NVD for available fixes.

VulniPulse[verified]@vulnipulsePatch

The post announces CVE‑2026‑47869, emphasizes the need to install the vendor’s fixed release, and includes basic CVE details but offers no exploit or PoC information.

Juy Lang@juy_langPatch

The advisory highlights three newly identified zero‑day CVEs affecting VMware AVI Load Balancer and urges administrators to upgrade promptly to mitigate the risk.

ExploitGrid@exploitgridPatch

The tweet discloses multiple critical VMware Avi Load Balancer and ProFTPD vulnerabilities, notes that patches are available, and provides a link to additional exploit details.

Autumn Good@autumn_good_35Patch

VMware Avi Load Balancer’s VMSA‑2026‑0005 provides patches for multiple CVEs, with no PoC, exploit code, or evidence of active exploitation.

CERT-PY@CERTpyDisclosure

A tweet announces three VMware product vulnerabilities (CVE-2026-47871, CVE-2026-47869, CVE-2026-47865) and links to external resources for more information.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE-2026-47869 as an Authenticated Code Injection RCE in VMware Avi Load Balancer, but provides no details on patches, exploits, or active attacks.