CVE-2026-47858
HIGH
NVD
CVSS Score
8
Severity
HIGH
Published
Jul 30, 2026
Vendor
unknown
Description
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Theia: 2.2.0 and earlier