Sage CRM 2026 R1 includes important updates to the Apache Tomcat application server, which plays a central role in the Sage CRM architecture.
As part of this Security and Compatibility release, Tomcat has been upgraded and hardened to improve security, stability and overall system performance.
Why Apache Tomcat Matters in Sage CRM
Apache Tomcat underpins several key areas of Sage CRM functionality, including:
- REST API (SData) services
- Interactive dashboards
- Background services and integrations
- Data processing and communication between components
Any improvement to Tomcat therefore has a direct impact on the reliability and performance of the wider Sage CRM system.
Upgrade to Apache Tomcat 9.0.112
In Sage CRM 2026 R1, Apache Tomcat has been upgraded to version 9.0.112.
This update delivers:
- Security fixes for known vulnerabilities (including CVE-2025-48984)
- Improved stability across web applications and services
- Better compliance with modern Java and infrastructure standards
Keeping Tomcat up to date is critical to maintaining a secure and supported platform.
Improved Stability and Performance
The Tomcat upgrade introduces several under-the-hood improvements that enhance the day-to-day operation of Sage CRM.
These include:
- Improved resource management under sustained load
- More stable handling of concurrent requests
- Better performance for REST services and dashboards
- Reduced likelihood of service interruptions in long-running environments
For customers running larger systems or integrations, these improvements can result in noticeably smoother operation.
Enhanced Reliability for Key Features
Because Tomcat supports multiple core features, improvements in this layer benefit several areas of Sage CRM:
REST API and Integrations
- More consistent behaviour when handling API requests
- Improved reliability for third-party integrations
Dashboards and Reporting
- More stable rendering of dashboard components
- Reduced errors when loading or refreshing dashboard data
Background Services
- Improved handling of asynchronous processing tasks
- Greater resilience in long-running services
Security Hardening
The upgrade to Tomcat 9.0.112 forms part of a broader security hardening effort in Sage CRM 2026 R1.
This includes:
- Addressing known vulnerabilities in earlier Tomcat versions
- Aligning with current supported Java platform standards
- Reducing exposure to security risks in web-facing components
These changes are particularly important in environments exposed to the internet or operating under strict security policies.
What This Means for Administrators
For system administrators, the Tomcat improvements in Sage CRM 2026 R1 provide:
- Greater confidence in system stability, particularly under load
- Reduced need for reactive maintenance, such as service restarts
- Improved compatibility with modern infrastructure and security standards
- Stronger foundation for integrations and API usage
Although these changes are largely behind the scenes, they play a critical role in ensuring reliable system operation.
The upgrade to Apache Tomcat in Sage CRM 2026 R1 is a key part of the platform’s ongoing modernisation.
By improving security, performance and stability at the application server level, Sage CRM continues to provide a robust and dependable foundation for business-critical processes.