The Point: VMware Avi Load Balancer contains vulnerabilities that allow attackers to bypass authentication and authorization mechanisms.
VMware has disclosed multiple critical security vulnerabilities in the Avi Load Balancer that enable bypassing authentication and authorization. This presents a significant risk for load balancing infrastructure in production environments, particularly at the network perimeter.
VMware has released critical severity security vulnerabilities in the Avi Load Balancer. These vulnerabilities allow attackers to circumvent authentication and authorization mechanisms, enabling direct access to protected systems without valid credentials.
The Avi Load Balancer is typically deployed in production environments as a central network appliance — often with access to critical applications and infrastructure. A successful authentication bypass at this layer would allow attackers to manipulate traffic, intercept requests, or modify system configurations.
CISOs should immediately verify which Avi Load Balancer versions are in use and apply available security updates from VMware. Interim measures such as restricting access to management interfaces or implementing additional monitoring rules for authentication attempts can reduce risk until patches are available or deployed.
Source: www.heise.de · Published 17 July 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.