Capcom Halts Street Fighter V Sales Following Critical Server Flaw
Osaka, Tuesday, 27 October 2026.
After artificial intelligence uncovered critical vulnerabilities in legacy web code, Capcom suspended online services and digital sales for Street Fighter V, exposing modern maintenance risks for older live-service titles.
Global Outage Triggers Emergency Response
Japanese gaming giant Capcom (TYO: 9697) has temporarily pulled Street Fighter V from digital storefronts worldwide and suspended its multiplayer network infrastructure following the discovery of a critical PHP security vulnerability [1][2][3]. The emergency maintenance was initiated after artificial intelligence-assisted cybersecurity research uncovered flaws in the decades-old PHP programming language that powers much of the game’s online infrastructure [1][2]. The abrupt shutdown represents a significant operational disruption for a title that, despite its age, has maintained a dedicated player base and contributed to Capcom’s recurring digital revenue streams. As of October 27, 2026, the PlayStation 4 and PC versions of Street Fighter V remain offline, with sales suspended on both Steam and the PlayStation Store [1][2][3].
PHP Vulnerabilities Spark Industry-Wide Scramble
The security flaw affecting Street Fighter V emerged from a broader cybersecurity crisis that unfolded last week, when AI-driven vulnerability scanning identified two critical issues within PHP, a foundational web development language used across countless online services [1][2]. The discovery triggered immediate responses from multiple sectors, with companies like Square Enix temporarily limiting connections in Final Fantasy XIV to apply emergency patches [2]. The PHP vulnerabilities, which stem from legacy code that has underpinned web services for decades, have exposed systemic risks in maintaining older live-service platforms, particularly those reliant on outdated infrastructure [1][2][3]. While some services resumed normal operations after patching, Capcom’s decision to delist Street Fighter V reflects a more cautious approach, prioritizing player security over immediate service restoration.
Gameplay Shifts to Offline Modes Amid Uncertain Timeline
Capcom has confirmed that players who already own Street Fighter V can continue to access offline content, including single-player modes, as the company works to resolve the security issues [1][2][3]. Online features such as ranked matches, casual lobbies, and competitive hubs remain disabled, with the company citing the need to “further strengthen security related to the PHP programming language” used in both PlayStation 4 and Steam versions of the game [1][3]. The publisher has not provided an estimated timeline for the restoration of online services or the game’s return to digital storefronts, leaving players and industry analysts to speculate about potential impacts on recurring revenue and player engagement [1][2][3]. The absence of a definitive schedule underscores the unpredictable nature of emergency cybersecurity interventions.
Legacy Title’s Struggles Highlight Broader Industry Challenges
Street Fighter V’s troubles reflect long-standing concerns about the sustainability of live-service games built on aging codebases. Launched in February 2016, the title has faced persistent server issues, including an infamous anti-cheat update on PC that later prompted a rollback due to security concerns [3]. Despite these challenges, Street Fighter V became the series’ best-selling entry at the time, with approximately 7.9 million copies sold [3]. However, the game’s ongoing online instability has increasingly contrasted with the momentum of its successor, Street Fighter 6, which surpassed 7 million units sold by June 2026 [3]. Capcom’s decision to prioritize security over continuity may signal a broader shift in how the industry addresses legacy live-service titles, particularly as cybersecurity threats evolve and regulatory scrutiny intensifies.