CVE WatchAug 1, 2026

CVE-2026-47873

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) ra

CVSS

8.0

High

EPSS

0.2%

KEV

—

Exploit Today

0-100

Published: Jul 30, 2026 · Last modified: Aug 1, 2026 · CWE-1327

EPSS · 30d

0.2%EPSS · 30 days0.2%

2026-07-302026-08-02

Technical description

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Official references

spring.iohttps://spring.io/security/cve-2026-47873

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-165039.1 CRI

3.9%

——1Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration.13h