CVE-2026-47873

—

CVSS 3.1

8.0 high

EPSS

<1%p9

Published

Jul 30, 2026 (Jul 30, 2026)

Modified

Aug 1, 2026

Description

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Weakness: CWE-1327
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.