Spring Tools For Eclipse vulnerabilities

• broadcom spring tools, spring tools for eclipse, tools for vscode / cursor / theia +2 more HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server CVE-2026-59326 3.3 LowJuly 30, 2026
• broadcom spring tools, spring tools for eclipse +1 more Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips CVE-2026-59328 4.2 MediumJuly 30, 2026
• broadcom spring tools, spring tools for eclipse +1 more Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations CVE-2026-59327 4.4 MediumJuly 30, 2026
• broadcom spring tools, spring tools for eclipse +1 more Spring Boot DevTools remote secret generated with a non-cryptographic PRNG CVE-2026-47882 8.3 HighJuly 30, 2026
• broadcom spring tools, spring tools for eclipse +1 more Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces CVE-2026-47873 8.0 HighJuly 30, 2026
• broadcom spring tools, spring tools for eclipse, tools for vscode / cursor / theia +2 more live information startup mode is vulnerable for remote code execution CVE-2026-47858 Public exploit 8.0 HighJuly 30, 2026