JAL Temporarily Closes Some Website Pages Over a Security Vulnerability

Japan Airlines posted a notice dated October 22, 2026 saying some pages and services on its website are temporarily closed as a precaution because of a serious vulnerability reported in PHP, a programming language used by some of its systems . The notice is in Japanese; this is our summary.

What JAL says is unaffected

JAL says reservations, ticketing and flight operations are not affected, and it reports no cyberattack and no data leak .

What we do not know

The notice does not name the closed pages and gives no start or end time. It does not mention JAL Mileage Bank, so we cannot say whether JMB pages are open. Closed pages will reopen in stages once repairs are done and safety is confirmed, with no timeline given .

What to do

If you have a JAL booking or award trip coming up, keep your confirmation details handy in case a page you normally use is down. Do not enter credentials on any page that looks unusual or any link in an unexpected email. As of Oct 22, 2026; confirm status on jal.co.jp.

Sources

• Japan Airlines: Temporary suspension of JAL website services due to security measures — https://www.jal.co.jp/ja-jp/news/general/2026/other/261021.html