Unrated severityNVD Advisory· Published Jul 30, 2026· Updated Aug 1, 2026

Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

CVE-2026-47873

Description

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Spring Projects/Spring Toolsllm-create
Range: <=5.2.0
Spring Tools/Spring Tools for Eclipsellm-fuzzy
Range: <=5.2.0

Patches

Vulnerability mechanics

References

spring.io/security/cve-2026-47873mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000