CVE-2026-47873CWE-1327

CVE-2026-47873

High · published July 30, 2026

CVSS v3.1
8.0
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback.

Affected Spring Products and Versions:

Spring Tools for Eclipse: 5.2.0 and earlier

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.1th percentile
Weakness
CWE-1327 · Binding to an Unrestricted IP Address
Published
2026-07-30T10:25Z
Affected products (1)
ProductVersionsFixed in
broadcom/spring_tools< 5.3.05.3.0
References (1)
https://spring.io/security/cve-2026-47873 · [email protected]
EPSS history
Timeline
  • 30 JUL 05:23Z
    Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
    cvelistv5