VMware Avi / VeloCloud Vulnerabilities & Security Advisories

7 advisories tracked · VMware Security Advisories (VMSA) via NVD · 0 listed in the CISA Known Exploited Vulnerabilities catalog

Every row below is a published VMware (Broadcom) advisory that VulniPulse classified as Avi / VeloCloud, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 1 critical, 6 high.

Source

VMware Security Advisories (VMSA) via NVD

Broadcom's VMSA portal is a JavaScript app with no stable public feed, so VulniPulse ingests VMware CVEs from NVD filtered to VMware's own CNAs ([email protected] and Broadcom's successor CNA) — official, CNA-published data covering ESXi, vCenter Server, NSX, Aria/vRealize, Cloud Foundation, Workstation/Fusion and VMware Tools. Each entry links back to the Broadcom/VMware advisory when NVD carries the reference.

Visit VMware (Broadcom) advisories VMware RSS feed

Latest VMware Avi / VeloCloud advisories

All severities critical (1)high (6)medium (0)low (0)

Critical9.8VMware

Critical [CVE-2026-47865] Avi Load Balancer: VMware Avi Load Balancer contains an authentication bypass vulnerability.

VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism.

High8.8VMware

High [CVE-2026-47871] Avi Load Balancer: VMware Avi Load Balancer contains a directory traversal vulnerability.

VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks.

High7.1VMware

High [CVE-2026-47870] Avi Load Balancer: VMware Avi Load Balancer contains a privilege escalation vulnerability.

VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able to execute remote code.

High8.7VMware

High [CVE-2026-47869] Avi Load Balancer: VMware Avi Load Balancer contains a remote code execution vulnerability.

VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated user with network access may be able to inject and execute code.

High7.8VMware

High [CVE-2026-47868] Avi Load Balancer: VMware Avi Load Balancer contains a local privilege escalation vulnerability.

VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate their privileges to run code as root.

High8.7VMware

High [CVE-2026-47867] Avi Load Balancer: VMware Avi Load Balancer contains a remote code execution vulnerability.

VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane and execute code remotely.

High8.3VMware

High [CVE-2026-47866] Avi Load Balancer: VMware Avi Load Balancer contains an authorization bypass vulnerability.

VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization.

Page 1 of 1 · showing 7 of 7

Get an email when VMware Avi / VeloCloud publishes the next one.

See VMware Avi / VeloCloud's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about VMware Avi / VeloCloud

iPhone and Android apps · New on the App Store

Monitor VMware Avi / VeloCloud CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Get CVE alerts on Android See app features

← All VMware advisories