CVE-2026-47865

broadcom vmware avi load balancer

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-47865

Katalog CVE

CVSS 9.8 · Critical EPSS 0,61%

Kerentanan Improper Authentication pada broadcom vmware avi load balancer. Skor CVSS 3.1 9.8 (Critical) menurut vmware.com.

Deskripsi (NVD)

VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Rincian

Terbit di NVD
18 Juli 2026
Terakhir diubah
20 Agustus 2026
Status NVD
Analyzed
CVSS 3.1
9.8 (Critical), sumber vmware.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-287: Improper Authentication
EPSS (30 hari)
0,61% peluang dieksploitasi; lebih tinggi dari 47,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
broadcom vmware avi load balancer Versi 22.1.1 hingga sebelum 22.1.7
broadcom vmware avi load balancer Versi 30.1.1 hingga sebelum 30.2.7
broadcom vmware avi load balancer Versi 31.1.1 hingga sebelum 31.2.2
broadcom vmware avi load balancer Versi 22.1.7
broadcom vmware avi load balancer Versi 22.1.7 2p10
broadcom vmware avi load balancer Versi 22.1.7 2p11
broadcom vmware avi load balancer Versi 22.1.7 2p2
broadcom vmware avi load balancer Versi 22.1.7 2p3
broadcom vmware avi load balancer Versi 22.1.7 2p4
broadcom vmware avi load balancer Versi 22.1.7 2p5
broadcom vmware avi load balancer Versi 22.1.7 2p6
broadcom vmware avi load balancer Versi 22.1.7 2p7
broadcom vmware avi load balancer Versi 22.1.7 2p8
broadcom vmware avi load balancer Versi 22.1.7 2p9
broadcom vmware avi load balancer Versi 31.2.2
broadcom vmware avi load balancer Versi 31.2.2 2p1
broadcom vmware avi load balancer Versi 31.2.2 2p2
broadcom vmware avi load balancer Versi 32.1.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.