Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-47870

CVE-2026-47870HIGH

VMware Avi Load Balancer Privilege Escalation Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0042   33.8     —

AFFECTED
  Product            Versions  Fixed
  Avi Load Balancer  32.1.1 –  —

TIMELINE
  May 20  Reserved by vmware
  Jul 18  Published (CNA: vmware)
  Aug 20  RESCORED — CVE-2026-47870 (VMware Avi Load Balancer). CVSS 7.1 → 8.8 (NVD).

CWE-269 · CNA: vmware · CVSS v3.1 · 1 reference · NVD status: Analyzed

Description

VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able to execute remote code. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
May 20, 2026	Reserved	Reserved by vmware
July 18, 2026	Published	Published (CNA: vmware)
August 20, 2026	RESCORED	RESCORED — CVE-2026-47870 (VMware Avi Load Balancer). CVSS 7.1 → 8.8 (NVD).

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
VMware	Avi Load Balancer	—	32.1.1	—

Weaknesses

CWE-269

References (1)

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926 [Vendor Advisory]

Authoritative record: CVE-2026-47870 at cve.org

Vendors: vmware

Weaknesses: CWE-269

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-47870 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.