JVN iPedia http://jvndb.jvn.jp Advisory JVNDB-2026-024105 The Apache Software Foundationから、Apache Tomcatの脆弱性（CVE-2026-59083、CVE-2026-59084）に対してアドバイザリが公開されました。 Fixed in Apache Tomcat 11.0.24Fixed in Apache Tomcat 10.1.57Fixed in Apache Tomcat 9.0.120 cpe:/a:apache:tomcat https://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-024105.html Common Vulnerabilities and Exposures (CVE) CVE-2026-59083 https://www.cve.org/CVERecord?id=CVE-2026-59083 Common Vulnerabilities and Exposures (CVE) CVE-2026-59084 https://www.cve.org/CVERecord?id=CVE-2026-59084 Apache Software Foundation Fixed in Apache Tomcat 9.0.120 https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.120 Apache Software Foundation [SECURITY] CVE-2026-59083 Apache Tomcat - Incorrect URL decoding in RewriteValve may allow security control bypass https://lists.apache.org/thread/1j9dq67ll6mhwt0t656xo8v8l8sc18dt Apache Software Foundation [SECURITY] CVE-2026-59084 Apache Tomcat - EncryptInterceptor requirements not clearly documented https://lists.apache.org/thread/7w9746ootcxo0gvx26xjpw80l31f1qw7 Apache Software Foundation Fixed in Apache Tomcat 11.0.24 https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.24 Apache Software Foundation Fixed in Apache Tomcat 10.1.57 https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.57 JVN JVNVU#95286373 https://jvn.jp/vu/JVNVU95286373/index.html 2026-07-17T16:23:21+09:00 2026-07-17T16:23:21+09:00