VulnSocial

CVE-2026-47873General(broadcom / spring_tools)

LOWCVSS 8.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch broadcom spring_tools systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

broadcom CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-1327

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • spring_tools

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-30); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
broadcom
Products
spring_tools

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-30: 1Mentions · 2026-08-01: 1Patch / Workaround · 2026-08-01: 1Technical Details · 2026-07-30: 1Technical Details · 2026-08-01: 107-3008-01
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-301
General1
2026-08-011
Patch1
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    CVE-2026-47873 - Spring Tools exposes Docker container control ports on all interfaces (0.0.0.0) instead of loopback. CVSS 8.0. Disable #Docker integration or restrict network access immediately. #CVE #infosec #SpringTools #cybersecurity #cybersecuritynews #cybersecuritytips #python #linux #devsecops #devops #developer #developers #git #github #gitlab https://www.valtersit.com/cve/CVE-2026-47873/

    Post summary

    The post warns about CVE‑2026‑47873’s exposure of Docker control ports, provides a CVSS score of 8.0, and recommends disabling Docker integration or restricting network access as a mitigation.

    0000041
    978 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-47873 The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Pr... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47873

    Post summary

    The post reports CVE-2026-47873, noting that the Spring Tools Boot Dashboard Docker integration exposes container control ports to all host interfaces rather than restricting them to loopback, with no patches, PoCs, or exploitation details provided.

    00000136
    4.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appbroadcomspring_tools-eclipse-

Explore more

Back to dashboardbroadcom CVEsspring_tools vulnerabilities