Temporary Suspension of Certain Services and Status Update Following Critical PHP Vulnerabilities

Updated: 12 Nov 2026

[12 November Update] TITP-W Service Restored
TITP-W has resumed operation following the completion of the necessary PHP version update. All services temporarily suspended due to these vulnerabilities have now been restored.

On 21 October 2026, two critical vulnerabilities in the PHP programming language (CVE-2026-109618 and CVE-2026-109619) were disclosed.
In response, ClassNK reviewed the potential impact on its services and implemented necessary security measures.
The current status of the services is as follows.

1. Services Restored

The following services have been restored following the necessary PHP version updates:
- TITP-W (Technical Intern Training Program-related service) [Restored: 12 November]
- ClassNK Academy (e-Learning website) [Restored: 29 October]
- PrimeShip-CTF

All services temporarily suspended in response to these vulnerabilities have now resumed operation.

2. Services Not Affected by These Vulnerabilities

The following services do not use PHP and are therefore not affected:
- Ship in Service
- e-Application
- NK-PASS
- NK-SHIPS
- ClassNK e-Certificate
- PrimeShip-HULL
- PrimeShip-PSC Intelligence
- ClassNK CHEMISYS
- TMReport
- e-Product
- ClassNK MRV Portal
- Request Form

ClassNK will continue to maintain the security of its services.
We sincerely apologize for any inconvenience caused by the temporary suspensions and appreciate your understanding and cooperation.