News & Events

Title:
Temporary Suspension of Certain Services and Status Update Following Critical PHP Vulnerabilities



Updated: 29 Oct 2026


[29 October Update] ClassNK Academy has resumed service following a PHP update, final vendor verification and website access confirmation by ClassNK.

On 21 October 2026, two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed. ClassNK has reviewed its services and taken necessary security measures. The current status is as follows.

1. Temporarily Suspended Service


TITP-W (Technical Intern Training Program-related service)
This PHP-based service remains suspended while security measures are implemented. It will resume after security is confirmed.

2. Restored Services


ClassNK Academy (e-Learning website) [Restored: 29 October]
PrimeShip-CTF
ClassNK Academy has resumed following a PHP version update, final vendor verification and ClassNK's website access check. PrimeShip-CTF has also been restored following a PHP version update.

3. Services Not Affected


The following services do not use PHP and are not affected by these vulnerabilities:
- Ship in Service
- e-Application
- NK-PASS
- NK-SHIPS
- ClassNK e-Certificate
- PrimeShip-HULL
- PrimeShip-PSC Intelligence
- ClassNK CHEMISYS
- TMReport
- e-Product
- ClassNK MRV Portal
- Request Form

ClassNK will continue to ensure the security of its services. We apologize for any inconvenience and appreciate your understanding.

ClassNK - BOH

Close