Security Advisory

CVE-2026-47858

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-30 05:15:31
Last updated 2026-08-01 03:56:10
Assigner vmware
CVSS score 8.0
State PUBLISHED

Description

Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Theia: 2.2.0 and earlier