CVE-2026-47865
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access can access the Avi Control plane without authentication.
Risk Assessment
An attacker can take control of the load balancer configuration, potentially disrupting network traffic and compromising application security.
Recommendation
Update VMware Avi Load Balancer to the version specified in the security advisory (e.g., 31.2.2-2p3, 30.2.7).
Original NVD description (English source)
VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)