Broadcom VMware Avi Load Balancer vulnerabilities

7 CVEs affecting Broadcom VMware Avi Load Balancer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-47871, published 2026-07-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-47871, published 2026-07-18. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. Affected…
CVE-2026-47869, published 2026-07-18. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able to inject and execute code. Affected versions: 32.1.1 (fixed…
CVE-2026-47867, published 2026-07-18. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane and execute code remotely. Affected…
CVE-2026-47865, published 2026-07-18. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication…
CVE-2026-47870, published 2026-07-18. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able to execute remote code. Affected versions: 32.1.1 (fixed in…
CVE-2026-47866, published 2026-07-18. High severity, CVSS 8.3. EPSS: 0.4% chance of exploitation in the next 30 days. VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization. Affected…
CVE-2026-47868, published 2026-07-18. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate their privileges to run code as root. Affected…