Temporary Suspension of Certain Services and Status Update Following Critical PHP Vulnerabilities

26 Oct 2026

On 21 October 2026, two critical vulnerabilities in the PHP programming language (CVE-2026-109618 and CVE-2026-109619) were disclosed.
In response, ClassNK has reviewed the potential impact on its services and is implementing the necessary security measures.
Certain services have been temporarily suspended to ensure their security. The current status of each service is as follows.

1. Temporarily Suspended Services
The following services use PHP and are currently undergoing the necessary security measures.

- TITP-W (Technical Intern Training Program-related service)
- ClassNK Academy (e-Learning website)

These services will resume once their security has been confirmed.

2. Service Restored

- PrimeShip-CTF

The necessary PHP version update has been completed, and the service has been restored.

3. Services Not Affected by These Vulnerabilities
The following services do not use PHP and are therefore not affected by these vulnerabilities.

- Ship in Service
- e-Application
- NK-PASS
- NK-SHIPS
- ClassNK e-Certificate
- PrimeShip-HULL
- PrimeShip-PSC Intelligence
- ClassNK CHEMISYS
- TMReport
- e-Product
- ClassNK MRV Portal
- Request Form

ClassNK will continue to take appropriate measures to maintain the security of its services.
We sincerely apologize for any inconvenience caused and appreciate your understanding and cooperation.