PT-2026-66405 · Spring · Spring Tools For Eclipse

CVE-2026-47873 · Published 2026-07-30 · Updated 2026-07-30

NVD

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Fix

Related Identifiers

CVE-2026-47873

Affected Products

Spring Tools For Eclipse

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-47873 · Security Note
• https://spring.io/security/cve-2026-47873 · Note