Capcom has pulled Street Fighter V from sale on Steam and the PlayStation Store and switched off its online features while it fixes a security problem tied to the PHP programming language. As VGC reports, the game remains playable offline for anyone who already owns it. Capcom hasn’t said when online play or sales will return.
The latest update came in a notice on the official Street Fighter account on X, which says “content requiring online functionality” is unavailable in the PS4 and Steam versions. Capcom adds that emergency maintenance is underway and that sales on both storefronts will be suspended “in stages” until the fix is complete.
The shutdown has been building for several days rather than arriving all at once. VGC says Capcom first flagged emergency maintenance on X last week. According to Output Lag, a notice on the game’s Steam page followed on Friday 23 October. The delisting is the step that turns a weekend outage into something more serious. Output Lag reports that the Steam listing has already lost its buy button, which fits Capcom’s wording that the PlayStation Store version follows in stages.
Why a 2016 fighting game is caught up in this
The trigger is the PHP flaw scramble. Output Lag says the PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on 21 October to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which can allow remote code execution without a login. VGC says a group of security researchers and organisations used AI to discover the two flaws last week. Capcom says the PS4 and Steam versions of Street Fighter V use PHP for their online functionality, which puts them in scope.
The pressure to move quickly has grown since the patches landed. TechCrunch reports that US cybersecurity agency CISA has confirmed hackers are now exploiting the two bugs. It has ordered US civilian federal agencies to fix their systems within three days. PHP is reportedly used by around 70% of web-facing servers, so the problem reaches far beyond games, and some governments and big companies took sites offline to patch. For a game that launched in February 2016, updating a backend nobody has touched in years is plausibly slower than patching a modern web service, though Capcom hasn’t explained its timeline.
What still works, and what doesn’t
Capcom’s notice doesn’t list the affected modes, but Output Lag’s breakdown is that ranked and casual matches, the Battle Lounge, Fighter Profiles and the in-game shop are down. It says story mode, Arcade, Survival, Training and local versus still run. Anyone who already owns the game keeps it, and Capcom says offline content “can still be enjoyed”. New buyers are the ones locked out for now.
The outage lands while the franchise is otherwise in good spirits: the Street Fighter film opened at No. 1 at the box office. Capcom’s notice names only the PS4 and Steam versions of Street Fighter V, and it hasn’t mentioned any other game in the series. It apologised for the inconvenience, and VGC notes the publisher has given no estimate for either the online return or the storefront relisting.
Can I still play Street Fighter V?
Yes, offline. Capcom says players who already own the PS4 or Steam version can keep playing offline content, but anything needing an online connection is switched off until the fix is done.
Can I still buy Street Fighter V on Steam or PlayStation?
Not reliably. Capcom says sales on Steam and the PlayStation Store are being suspended in stages, and Output Lag reports the Steam listing has already lost its buy button. Capcom hasn’t said when sales will resume or whether the suspension covers every region.
When will Street Fighter V’s servers come back?
Capcom hasn’t said. Its notice only says emergency maintenance is underway. We’d watch the official Street Fighter account on X and the game’s Steam news page for updates.
