CVE-2026-47873 — Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

CVE-2026-47873

Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces PUBLISHED

Description (CNA)

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Affected (CNA)

Vendor / product	Versions
Spring / Spring Tools for Eclipse	affected 0 through 5.2.0

CWE

No CWE identifiers supplied.

References

https://spring.io/security/cve-2026-47873

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.