CVE-2026-47865: VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authenti

criticalCVSS 9.8CVE-2026-47865

VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Details

Source: NVD Recent CVEs (US · database · site)
Severity: critical — CVSS 9.8
Published: 2026-07-18
Last updated: 2026-07-23
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-47865

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-478650.87% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 55% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-47865	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

criticalBroadcom VMware security advisory (AV26-712)cccs

Recent advisories for VMware Avi Load

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCVE-2026-47871: VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path vali…nvd · 2026-07-18
highCVE-2026-47870: VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authentica…nvd · 2026-07-18
highCVE-2026-47869: VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authentic…nvd · 2026-07-18
highCVE-2026-47868: VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user…nvd · 2026-07-18
highCVE-2026-47867: VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with…nvd · 2026-07-18
highCVE-2026-47866: VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on …nvd · 2026-07-18