CVE-2026-47873

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Score

CVSS 3.1 8.0 High

Status

Analyzed - security@vmware.com

Published

2026-07-30

Last modified

2026-10-23

Weaknesses

CWE-1327

Affected products

• Spring Tools (Broadcom)
• Spring Tools For Eclipse (Spring)

References

• https://spring.io/security/cve-2026-47873