CVE-2026-47865
critical · 9.8VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)
9.8
CVSS
0.8%
EPSS (exploit prob.)
56th
EPSS percentile
2026-07-18
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| broadcom | vmware_avi_load_balancer | >= 22.1.1, < 22.1.7 |
| broadcom | vmware_avi_load_balancer | >= 30.1.1, < 30.2.7 |
| broadcom | vmware_avi_load_balancer | >= 31.1.1, < 31.2.2 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 22.1.7 |
| broadcom | vmware_avi_load_balancer | 31.2.2 |
| broadcom | vmware_avi_load_balancer | 31.2.2 |
| broadcom | vmware_avi_load_balancer | 31.2.2 |
| broadcom | vmware_avi_load_balancer | 32.1.1 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-47865