The following "Apache Tomcat" vulnerability has been disclosed.
For details on the vulnerability and its impact, please refer to The Apache Software Foundation.
・CVE-2026-101356
https://lists.apache.org/thread/d1xjt7bbjqw7y7n5mcb4fm815hpfgc27
・CVE-2026-101296
https://lists.apache.org/thread/bl52b9go9ckoov8x4v3dt6rkm573cygd
・CVE-2026-103119
https://lists.apache.org/thread/sk2cg4k077fwcqbm6tqz2n700nq06h80
・CVE-2026-93446
https://lists.apache.org/thread/zh87okr5qspv4byzfpy2w6dqrokrnxzw
・CVE-2026-88041
https://lists.apache.org/thread/dnmm9l3byytg3l66nk1jrqfrl7jty7n1
・CVE-2026-74049
https://lists.apache.org/thread/lolc9wo4tzjog2tnwctv93hz9gjcdnc6
・CVE-2026-74048
https://lists.apache.org/thread/v5ry0sx1c7x1wr5mx4cddj3p3mv1ho6m
・CVE-2026-80353
https://lists.apache.org/thread/tr0q87qwvs80p9hc53tkwpzvnx0ywftr
* Target Products
If you are running a system that calls the following products from Tomcat
・IM-PDFAutoConverter for AccelPlatform
・IM-PDFCoordinator for AccelPlatform
・IM-PDFDesigner for AccelPlatform
・IM-PDFDesigner FullPack for AccelPlatform
・IM-PDFDirectPrint for AccelPlatform
・IM-PDFTimeStamper for AccelPlatform
・IM-ContentsSearch for AccelPlatform (when using Tomcat in 2020 Winter or earlier)
・IM-SecureSignOn for AccelPlatform (when using Tomcat for LoginServer)
* Affected areas
○CVE-2026-93446
- If you are using TLS 1.3, the post-communication process may not complete properly,
and some subsequent connections may fail.
○CVE-2026-74048
- If FIPS mode (a mode that uses only strong encryption methods) is enforced but fails to activate,
the system may not shut down safely and may unintentionally start up using a weak encryption method.
* How to respond
- If you are using the Apache Tomcat Ver.9, please upgrade to ver.9.0.123.
* For customers considering upgrading to Tomcat Ver.10
Upgrading to Tomcat Ver.10 will cause the current modules to stop working.
A module compatible with Tomcat 10 is scheduled to be released on October 30, 2026.
If you wish to upgrade to Tomcat Ver.10, please apply the module first and then migration to Tomcat Ver.10.
-- Target --------------------------------------------------------------------------------
iAP/Accel Extensions/IM-PDFDesigner/All Updates
iAP/Accel Extensions/IM-PDFAutoConverter/All Updates
iAP/Accel Extensions/IM-PDFCoordinator/All Updates
iAP/Accel Extensions/IM-PDFDirectPrint/All Updates
iAP/Accel Extensions/IM-PDFTimeStamper/All Updates
iAP/Accel Extensions/IM-ContentsSearch for Accel Platform/2020 Winter or earlier
iAP/Accel Applications/IM-SecureSignOn for Accel Platform/All Updates
--------------------------------------------------------------------------------
FAQID:1503
Impact of "Apache Tomcat" vulnerabilities on our products