CVE-2026-47858High· 8.0▾ MidnightPoC availableStarting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclips…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 44 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
1 GitHub repo
0.2% → 0.3%
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring Tools for VSCode / Cursor / Theia: 2.2.0 and earlier
spring_tools < 2.3.0spring_tools < 5.3.0Upgrade past the affected range:
spring_tools 5.3.0Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-85423High· 8.8A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0
CVE-2026-85421High· 8.8A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0
CVE-2026-85489High· 8.8An authentication flaw exists in the Brocade ASCG administrative management service component
CVE-2026-87664High· 7.8A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1
CVE-2026-87659Critical· 9.8A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1
CVE-2026-59327Medium· 4.4Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a plain string attribute on the "Spring Boot DevTools Client" launch configuration