What is GHSA-7hx5-4268-25qv?

GHSA-7hx5-4268-25qv is a security advisory published by GitHub Security Advisories with High severity. VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the...

Which CVE IDs does GHSA-7hx5-4268-25qv cover?

GHSA-7hx5-4268-25qv covers the following CVE IDs: CVE-2026-47866. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7hx5-4268-25qv?

GHSA-7hx5-4268-25qv has a CVSS v3 base score of 8.3, published by GitHub Security Advisories.

GHSA-7hx5-4268-25qvHighCVSS 8.3

VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the...

Vendor

GitHub Security Advisories

Published

July 18, 2026

Last Modified

July 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-47866 →

📋 Description

VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the network can access a limited subset of the Avi Control Plane without proper authorization.

Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-47866
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926
https://github.com/advisories/GHSA-7hx5-4268-25qv