TOC
Responding to critical vulnerabilities
We would like to inform you about recently disclosed vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619), Tomcat (CVE-2026-101356, CVE-2026-101296, etc.), Node.js (10 vulnerabilities), and Java vulnerabilities (CVE-2026-91403, etc.), as well as their impact on our products, services, and official website, and the status of our countermeasures.
| subject | PHP | Tomcat | Java | Node.js | Response status |
|---|---|---|---|---|---|
| Official website (chat-messenger.com) | can be | none | none | none | completion |
| CAMServer (on-premise version) | none | can be | can be | none | Supported in the latest version v4.64.04 and later. * |
| Chat&Messenger Cloud Service | none | can be | can be | none | completion |
* In environments where the on-premises version is not exposed to the internet and access is limited to within the company network, direct attack routes from external sources are restricted, making the situation less urgent.
Other
Impact assessment regarding the disclosed vulnerability in Google Brotli (CVE-2026-111497)
No dependency
Finally.
We will continue to implement security measures to ensure that you can use our services with peace of mind.