CVE-2026-47868

{
  "id": "CVE-2026-47868",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-18T09:17:08.627",
  "lastModified": "2026-10-24T20:10:00.137",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with local access may be able to escalate their privileges to run code as root.\n\nAffected versions:\n32.1.1 (fixed in 32.1.2)\n31.1.1 through 31.2.2 (fixed in 31.2.2-2p3)\n30.1.1 through 30.2.6 (fixed in 30.2.7)\n22.1.1 through 22.1.7 (fixed in 30.2.7)"
    },
    {
      "lang": "es",
      "value": "VMware Avi Load Balancer contiene una vulnerabilidad de escalada de privilegios local. Un usuario malintencionado con acceso local podría ser capaz de escalar sus privilegios para ejecutar código como root.\n\nVersiones afectadas:\n32.1.1 (corregido en 32.1.2)\n31.1.1 hasta 31.2.2 (corregido en 31.2.2-2p3)\n30.1.1 hasta 30.2.6 (corregido en 30.2.7)\n22.1.1 hasta 22.1.7 (corregido en 30.2.7)"
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "VMware",
          "product": "Avi Load Balancer",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "32.1.1",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "31.1.1",
              "lessThanOrEqual": "31.2.2",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "30.1.1",
              "lessThanOrEqual": "30.2.6",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "22.1.1",
              "lessThanOrEqual": "22.1.7",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-22T00:00:00+00:00",
          "id": "CVE-2026-47868",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:broadcom:vmware_avi_load_balancer:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "22.1.1",
              "versionEndIncluding": "22.1.7",
              "matchCriteriaId": "243FCCB5-E71D-42EE-B634-18C3764D128F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:broadcom:vmware_avi_load_balancer:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "30.1.1",
              "versionEndExcluding": "30.2.7",
              "matchCriteriaId": "3E9EADC5-BEE0-411D-8BA5-62EC1847D834"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:broadcom:vmware_avi_load_balancer:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "31.1.1",
              "versionEndExcluding": "31.2.2",
              "matchCriteriaId": "3961AB50-8B9B-474D-8B25-F039F94BE703"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:broadcom:vmware_avi_load_balancer:31.2.2:-:*:*:*:*:*:*",
              "matchCriteriaId": "59DAB0A9-D0C2-465B-ADE0-9BB64DA9CB8D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:broadcom:vmware_avi_load_balancer:31.2.2:2p1:*:*:*:*:*:*",
              "matchCriteriaId": "83F16554-7961-4AFC-8324-E6FDE01A0BAF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:broadcom:vmware_avi_load_balancer:31.2.2:2p2:*:*:*:*:*:*",
              "matchCriteriaId": "FD6ACD46-BBF6-4900-92C4-F4C77B979CF4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:broadcom:vmware_avi_load_balancer:32.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B1FF054-1986-4182-821B-93C0D8ABE41F"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37926",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}