VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 18, 2026· Updated Aug 20, 2026

CVE-2026-47871

CVE-2026-47871

Description

VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks.

Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Broadcom Corporation/Vmware Avi Load Balancer5 versions
    cpe:2.3:a:broadcom:vmware_avi_load_balancer:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:broadcom:vmware_avi_load_balancer:*:*:*:*:*:*:*:*range: >=22.1.1,<=22.1.7
    • cpe:2.3:a:broadcom:vmware_avi_load_balancer:31.2.2:-:*:*:*:*:*:*
    • cpe:2.3:a:broadcom:vmware_avi_load_balancer:31.2.2:2p1:*:*:*:*:*:*
    • cpe:2.3:a:broadcom:vmware_avi_load_balancer:31.2.2:2p2:*:*:*:*:*:*
    • cpe:2.3:a:broadcom:vmware_avi_load_balancer:32.1.1:*:*:*:*:*:*:*
  • VMware/AVI Load Balancerllm-fuzzy
    Range: 32.1.1, 31.1.1-31.1.1, 30.1.1-30.2.6, 22.1.1-22.1.7
  • Broadcom Corporation/Avi Load Balancerllm-fuzzy
    Range: 32.1.1, 31.1.1-31.1.1, 30.1.1-30.2.6, 22.1.1-22.1.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.