CVE Watch1 ago 2026

CVE-2026-47873

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) ra

CVSS

8.0

Alto

EPSS

0.2%

KEV

—

Exploit Today

0-100

Publicado: 30 jul 2026 · Última mod.: 1 ago 2026 · CWE-1327

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-07-302026-08-02

Descripción técnica

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Referencias oficiales

spring.iohttps://spring.io/security/cve-2026-47873

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-165039.1 CRÍ

3.9%

——1Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration.14h