← Database

CVE-2026-47858

HIGH CVSS: 8.0 Published: 2026-07-30 Modified: 2026-08-01

Description

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Theia: 2.2.0 and earlier

Affected Platforms

Unknown

Weakness Type

CWE-306

References