Digital Life

Capcom pulls Street Fighter 5 offline and off sale over PHP flaw

By Rhea MalhotraDigital Life Writer, Peepals Yuva
WhatsAppX
Representative image: arcade joystick buttons

Representative image: AndrzejRembowski / Pixabay

Capcom has taken Street Fighter 5's online modes offline and halted sales on PS4 and Steam while it fixes PHP security flaws, it said this week.

What Happened

Capcom, the Japanese publisher of the Street Fighter series, has suspended sales of Street Fighter 5 (also written Street Fighter V) and switched off all of the game's online features on PlayStation 4 and Steam while it deals with security problems in PHP, the widely used programming language that runs many web servers. Reports on October 27, 2026 said the company had disabled all content that needs an online connection "to strengthen security", and that the game's purchase option had been removed from the Steam store. Offline modes, including single-player play, still work. Capcom has not said when online play or sales will return.

Key Facts

  • Game affected: Street Fighter 5, on PlayStation 4 and Steam (PC).
  • All features that need an online connection are switched off; offline and single-player modes still work.
  • Sales are being suspended in stages; the Steam page still loads but has no buy button.
  • Cause given: security issues linked to PHP. Reports say the PHP project released fixes on October 21, 2026 for two serious flaws that could let an attacker run code on a server without logging in.
  • A maintenance notice had been on the game's Steam news feed since October 23.
  • Capcom has not given a date for restoring services, and has not said whether any player data was affected.
  • Separately, Capcom disclosed on October 22 that 11,774,247 CAPCOM ID account records had been accessed without permission. No link between that breach and the Street Fighter 5 shutdown has been confirmed.

Why It Matters

Street Fighter 5 has been succeeded by Street Fighter 6, but it still has players around the world. For them, the practical effect is simple: they cannot play online until Capcom brings the servers back, and new players cannot buy the game for now.

The bigger lesson is about how online games are built. Behind the matchmaking screen of almost any multiplayer game is a set of web servers that handle logins, rankings, purchases and match data. Many of these run on common software such as PHP. When a serious hole is found in software that so many companies use, every company running it must update quickly or take the service offline. Flaws that allow "remote code execution" are among the most dangerous kind, because an attacker could take control of the server and reach whatever data it holds. Capcom appears to have chosen to shut the old game's online services rather than leave them exposed while it works on a fix.

The timing has made players nervous. The shutdown comes only days after Capcom said an intruder had reached millions of CAPCOM ID records, mostly email addresses and login details, and had changed the passwords of 196 accounts. The company said payment card details were not affected. Capcom has not tied the two events together, and players should not assume a connection, but together they show how gaming accounts have become a target.

Date (2026)What happened
October 19Capcom detects suspicious activity on its membership service
October 21PHP project releases fixes for serious flaws
October 22Capcom discloses access to 11.7 million CAPCOM ID records
October 23Emergency maintenance notice appears for Street Fighter 5 on Steam
October 27Reports confirm sales halted and online modes switched off

Impact

Short-term: Street Fighter 5 players can only play offline. Anyone who wants the game must wait for it to return to sale. Players with a CAPCOM ID should watch out for phishing emails that use the breach news to trick them, and should change their password if they reuse it on other sites.

Long-term: Older online games are often the least maintained part of a publisher's business. This episode may push companies to either keep their older servers updated or shut them down for good, which means players could lose online access to games they paid for.

Who is affected: Street Fighter 5 players on PS4 and PC, fighting-game communities and tournament organisers that still use the game, and CAPCOM ID holders worldwide.

Key Takeaway

Capcom has taken Street Fighter 5 offline and off sale while it fixes PHP security flaws; offline play still works, and there is no date yet for a return.

Questions and Answers

Why is Street Fighter 5 offline?

Capcom says it has disabled all online content to strengthen security while it addresses issues in PHP, the programming language used on many web servers. Reports link this to two serious PHP flaws that were patched on October 21, 2026.

Can I still play Street Fighter 5?

Yes, but only offline. Single-player and other offline modes still work on PS4 and Steam. Anything that needs an online connection, such as online matches, is unavailable.

Is the Capcom Street Fighter 5 PHP security issue linked to the CAPCOM ID breach?

Capcom has not said so. The CAPCOM ID breach, disclosed on October 22, involved about 11.7 million account records. No connection between the two has been confirmed.

When will Street Fighter 5 be back on sale?

Capcom has not announced a date for restoring sales or online services.

Disclaimer: Prepared by the Peepals newsroom from publicly available sources with AI assistance. Information is accurate to the best of our knowledge at the time of publication and may change. Images may be representative. Not professional advice. Report an error via our contact page.

By Rhea Malhotra, Digital Life WriterCovers Digital Life and more for Peepals Yuva. All stories by Rhea Malhotra

Get the day's stories in your inbox

Peepals Weekly: the week decoded, free. One email a week, unsubscribe in one click.

Rhea Malhotra is a pen name of the Peepals Global Editorial Team, which researches, fact-checks and publishes every story. The portrait is an illustration.

More from Peepals Yuva

The week's top stories, in your inbox. Free.

The most important, fact-checked stories from all seven publications, once a week.