--- title: CVE-2026-47873: Spring Tools Docker integration... description: CVE-2026-47873 discloses a security vulnerability in Spring Tools' Docker integration where unauthenticated debug (JDWP) and JMX ports are exposed on all... canonical: https://daily.dev/posts/cve-2026-47873-spring-tools-docker-integration-publishes-unauthenticated-debug-jdwp-and-jmx-ports-kbntlbdzz twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces | daily.dev og:description: CVE-2026-47873 discloses a security vulnerability in Spring Tools' Docker integration where unauthenticated debug (JDWP) and JMX ports are exposed on all... og:url: https://daily.dev/posts/cve-2026-47873-spring-tools-docker-integration-publishes-unauthenticated-debug-jdwp-and-jmx-ports-kbntlbdzz og:image: https://api.daily.dev/og/posts/KBNTlBDzz.png og:image:alt: CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces **[Spring](https://daily.dev/sources/spring)** · 1 min read · 5 upvotes · 1 comments ## Summary CVE-2026-47873 discloses a security vulnerability in Spring Tools' Docker integration where unauthenticated debug (JDWP) and JMX ports are exposed on all network interfaces, potentially allowing unauthorized remote access to Java applications running in Docker containers. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is CVE-2026-47873 in Spring Tools? CVE-2026-47873 is a vulnerability in the Spring Tools Docker integration where debug (JDWP) and JMX ports are published unauthenticated on all network interfaces instead of being restricted locally. This exposure could let an attacker on the network reach these ports without credentials, potentially enabling remote code execution or unauthorized management access to the running application. _Track Spring Tools security advisories like this one on daily.dev before they hit your Docker setup._ ## Community discussion Top comments from developers on daily.dev. **@trevorsuna** · 0 upvotes > Binding debug ports to every interface is a sharp reminder that a container boundary is not a network policy. Teams should check generated Compose or run settings, host exposure, and cloud firewall rules—not just the image—and add a CI check for unexpected published management ports. ## Similar posts on daily.dev - [CVE-2026-59327: Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations](https://daily.dev/posts/cve-2026-59327-cleartext-storage-of-spring-boot-devtools-remote-secret-in-eclipse-launch-configurat-5xneum2cf) · Spring · 2 upvotes · 0 comments - [CVE-2026-47882: Spring Boot DevTools remote secret generated with a non-cryptographic PRNG](https://daily.dev/posts/cve-2026-47882-spring-boot-devtools-remote-secret-generated-with-a-non-cryptographic-prng-ftv33bgzh) · Spring · 6 upvotes · 0 comments - [Artifactory Vulnerabilities Under Active Exploitation Enable Authentication Bypass and Admin Access](https://daily.dev/posts/artifactory-vulnerabilities-under-active-exploitation-enable-authentication-bypass-and-admin-access-39gsdirjz) · InfoQ · 0 upvotes · 0 comments - [CVE-2026-82329: Unauthenticated Administrative Access in…](https://daily.dev/posts/cve-2026-82329-unauthenticated-administrative-access-in--jp5ers0bt) · Sliver C2 Documentation · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#java](https://daily.dev/tags/java), [#docker](https://daily.dev/tags/docker) [View this post on daily.dev](https://daily.dev/posts/cve-2026-47873-spring-tools-docker-integration-publishes-unauthenticated-debug-jdwp-and-jmx-ports-kbntlbdzz) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces","url":"https://daily.dev/posts/cve-2026-47873-spring-tools-docker-integration-publishes-unauthenticated-debug-jdwp-and-jmx-ports-kbntlbdzz","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cve-2026-47873-spring-tools-docker-integration-publishes-unauthenticated-debug-jdwp-and-jmx-ports-kbntlbdzz"},"datePublished":"2026-07-29T19:54:58.456Z","dateModified":"2026-09-14T07:04:19.807Z","description":"CVE-2026-47873 discloses a security vulnerability in Spring Tools' Docker integration where unauthenticated debug (JDWP) and JMX ports are exposed on all...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ff749d548af41095da8724da8d7ba5f9?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ff749d548af41095da8724da8d7ba5f9?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Spring","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Spring","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/spring","url":"https://daily.dev/sources/spring"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/cve-2026-47873-spring-tools-docker-integration-publishes-unauthenticated-debug-jdwp-and-jmx-ports-kbntlbdzz","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":5},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"security,java,docker","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Spring","item":"https://daily.dev/sources/spring"},{"@type":"ListItem","position":3,"name":"CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/cve-2026-47873-spring-tools-docker-integration-publishes-unauthenticated-debug-jdwp-and-jmx-ports-kbntlbdzz","comment":[{"@type":"Comment","text":"Binding debug ports to every interface is a sharp reminder that a container boundary is not a network policy. Teams should check generated Compose or run settings, host exposure, and cloud firewall rules—not just the image—and add a CI check for unexpected published management ports.","datePublished":"2026-07-30T02:43:21.768Z","url":"https://daily.dev/posts/KBNTlBDzz#c-OWyMQ7cVp","author":{"@type":"Person","name":"Trevor Suna","url":"https://daily.dev/trevorsuna","image":"https://media.daily.dev/image/upload/s--dZ7gXxpp--/f_auto/v1784081551/avatars/avatar_EMoP47rpuw8DNjhp6R1b6?_a=BAMAMicg0"}}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cve-2026-47873-spring-tools-docker-integration-publishes-unauthenticated-debug-jdwp-and-jmx-ports-kbntlbdzz#faq","mainEntity":[{"@type":"Question","name":"What is CVE-2026-47873 in Spring Tools?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-47873 is a vulnerability in the Spring Tools Docker integration where debug (JDWP) and JMX ports are published unauthenticated on all network interfaces instead of being restricted locally. This exposure could let an attacker on the network reach these ports without credentials, potentially enabling remote code execution or unauthorized management access to the running application. Track Spring Tools security advisories like this one on daily.dev before they hit your Docker setup."}}]} ```