CVE-2026-47871Disclosure(broadcom / vmware_avi_load_balancer)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch broadcom vmware_avi_load_balancer systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

0.8/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • vmware_avi_load_balancer

Threat summary

  • Patch or workaround signal is available
  • 10 mentions across 8 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • General: 3 classified signals
  • Peaked 5d ago at 3 mentions (2026-07-18); latest day: 1
  • 10 total mentions across 8 days

Affected systems

Vendors
Products
vmware_avi_load_balancer

2 versions affected across 1 product

Deep dive

Activity timeline10 mentions / 8d
01223Mentions · 2026-07-15: 1Mentions · 2026-07-16: 1Mentions · 2026-07-18: 3Mentions · 2026-07-24: 1Mentions · 2026-07-25: 1Mentions · 2026-07-27: 1Mentions · 2026-07-28: 1Mentions · 2026-07-30: 1Patch / Workaround · 2026-07-16: 1Patch / Workaround · 2026-07-18: 1Patch / Workaround · 2026-07-30: 1Technical Details · 2026-07-18: 3Technical Details · 2026-07-30: 107-1507-1607-1807-2407-2507-2707-2807-30
Signal classification3 categories
Disclosure
440.0%
Patch
330.0%
General
330.0%
Referenced assets6 URLs
Classification over time
DateTotalLabels
2026-07-151
Disclosure1
2026-07-161
Patch1
2026-07-183
Disclosure2Patch1
2026-07-241
Disclosure1
2026-07-251
General1
2026-07-271
General1
2026-07-281
General1
2026-07-301
Patch1
Full discourse10 posts
  • Juy Lang@juy_lang
    Patch

    Vulnerabilities 0Day - CVE-2026-47869, CVE-2026-47870, CVE-2026-47871 affect VMware AVI Load Balancer during my research security. System Administrators need to upgrade to quickly resolve this issue. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926

    Post summary

    The advisory highlights critical 0Day CVEs for the VMware AVI Load Balancer and urges administrators to apply the official patch to mitigate the vulnerability.

    10090678
    135 followersView on X
  • Autumn Good@autumn_good_35
    Disclosure

    VMSA-2026-0005: VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871) https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926

    Post summary

    The advisory identifies seven CVEs affecting VMware Avi Load Balancer and notes they are being addressed, but no PoC, exploit code, active exploitation, patch details, or technical vulnerability information is provided.

    00010485
    6.9K followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Patch

    CVE-2026-47871 VMwareのAvi Load Balancerの脆弱性をわかりやすく解説|影響範囲と対策まとめ https://www.cybernote.click/2026/07/25/cve-2026-47871-avi-load-balancer/ #IT #Security #cybersecurity

    Post summary

    The article offers a clear explanation of CVE‑2026‑47871 in VMware Avi Load Balancer, detailing the technical aspects of the vulnerability and summarizing patch or mitigation steps, without mentioning any PoC, exploit code, or active exploitation.

    0000058
    210 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    CVE-2026-47871 VMwareのAvi Load Balancerの脆弱性をわかりやすく解説|影響範囲と対策まとめ https://www.cybernote.click/2026/07/25/cve-2026-47871-avi-load-balancer/ #IT #Security #cybersecurity

    Post summary

    The post references a VMware Avi Load Balancer vulnerability (CVE‑2026‑47871) and links to an article that presumably outlines its scope and countermeasures, but no concrete technical or exploit details are provided.

    0000040
    209 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    CVE-2026-47871 VMwareのAvi Load Balancerの脆弱性をわかりやすく解説|影響範囲と対策まとめ https://www.cybernote.click/2026/07/25/cve-2026-47871-avi-load-balancer/ #IT #Security #cybersecurity

    Post summary

    The linked article promises an easy explanation of CVE‑2026‑47871 for VMware Avi Load Balancer, but the excerpt offers only the title and URL with no PoC, exploit, patch, or technical detail.

    0000043
    209 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    CVE-2026-47871 VMwareのAvi Load Balancerの脆弱性をわかりやすく解説|影響範囲と対策まとめ https://www.cybernote.click/2026/07/25/cve-2026-47871-avi-load-balancer/ #IT #Security #cybersecurity

    Post summary

    The article appears to provide an overview of CVE‑2026‑47871 in VMware Avi Load Balancer, touching on affected scope and general countermeasures, but it does not supply detailed technical information, PoC, exploit code, or explicit patch guidance.

    0000047
    208 followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos VMware ❗ CVE-2026-47871 ❗ CVE-2026-47869 ❗ CVE-2026-47865 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-vmware-6/ https://t.co/Mp2j9dqAcM

    Post summary

    The post announces three VMware CVEs, functioning as a disclosure but offering no further technical, exploit, or mitigation information.

    00000185
    6.7K followersView on X
  • ADK Cyber@ADKCyber
    Disclosure

    CVE-2026-47871 (CVSS 8.8): VMware Avi Load Balancer directory traversal flaw affects authenticated users. Review deployments if in use. https://nvd.nist.gov/vuln/detail/CVE-2026-47871 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/iW91HWcyFN

    Post summary

    The tweet announces a new high‑severity directory traversal vulnerability (CVE‑2026‑47871) in VMware Avi Load Balancer, offering basic technical details but no PoC, exploit, or patch information.

    0000061
    89 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-47871 Directory Traversal in VMware Avi Load Balancer Versions 22.1.1 Through 32.1.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47871

    Post summary

    The text announces a directory traversal vulnerability in VMware Avi Load Balancer (CVE-2026-47871) and links to a vulnerability database, but provides no exploit code, active exploitation evidence, or patch information.

    00000102
    4.1K followersView on X
  • VulniPulse@vulnipulse
    Patch

    ⚠️ VMware Avi Load Balancer alert: CVE-2026-47871 (CVSS 8.8) Attackers could access files outside the intended path. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/vmware-cve-2026-47871 #VMware #AviLoadBalancer #CyberSecurity #CVE

    Post summary

    The advisory for CVE-2026-47871 details a CVSS 8.8 file-path traversal vulnerability and urges customers to upgrade to the vendor‑provided fixed release. No PoC or active exploitation is mentioned.

    0000046
    6 followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
Appbroadcomvmware_avi_load_balancer---
Appbroadcomvmware_avi_load_balancer31.2.2--
Appbroadcomvmware_avi_load_balancer31.2.2--
Appbroadcomvmware_avi_load_balancer31.2.2--
Appbroadcomvmware_avi_load_balancer32.1.1--

Explore more