VMware Avi Load Balancer Vulnerabilities Let Attackers Bypass Authentication

Cybersecuritynews •Guru Baran • July 14, 2026

Broadcom-owned VMware has disclosed multiple security flaws in its Avi Load Balancer platform (formerly NSX Advanced Load Balancer) that let attackers bypass authentication controls and gain unauthorized database access through crafted SQL queries. The most severe of these, CVE-2025-22217, carries a CVSSv3 score of 8.6 and requires no authentication or user interaction to exploit. The […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated attackers to execute arbitrary code remotely and affects versions 25.3.1 or earlier of Remote Support and 24.3.4 or earlier of Privileged Remote Access. Users are advised to apply the patches released on February 6, 2026, to mitigate the risk of exploitation. 860 sources 67

Extracted Entities

VMware Avi Load Balancer Vulnerabilities Let Attackers Bypass Authentication

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (2)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)