Spring Tools for Eclipse

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. live information startup mode is vulnerable for remote code executionCVE-2026-47858Spring · CVSS 8 · 0.3% likely

   CWE-306

2. Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfacesCVE-2026-47873Spring · CVSS 8 · 0.3% likely

   CWE-1327

3. Spring Boot DevTools remote secret generated with a non-cryptographic PRNGCVE-2026-47882Spring · CVSS 8.3 · 0.2% likely

   CWE-338

4. Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency TooltipsCVE-2026-59328Spring · CVSS 4.2 · 0.2% likely

   CWE-79

5. HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language ServerCVE-2026-59326Spring · CVSS 3.3 · 0.1% likely

   CWE-532

6. Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch ConfigurationsCVE-2026-59327Spring · CVSS 4.4 · 0.1% likely

   CWE-312

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.