Final Fantasy XIV, Umamusume: Pretty Derby and more hit by PHP vulnerability outages
The discovery of a critical vulnerability in the PHP programming language this week has triggered service outages for various games globally. Major titles, including Final Fantasy XIV and Umamusume: Pretty Derby, were among those affected.
The vulnerability poses a risk of substantial security breaches for the vast number of websites and applications built on PHP. Consequently, owners of online services using the language were advised to take their systems offline until a fix could be deployed. This precautionary advice inevitably impacted the gaming industry.
Regarding Final Fantasy XIV, an official post on the Lodestone website stated that security "enhancements" were being implemented on the MMO's patch servers. This led to a temporary suspension of new logins. While login services have since been restored, the server backup feature for user save data remains offline.
The gacha game Umamusume: Pretty Derby underwent a complete shutdown. Because its server-side infrastructure relies on PHP, developers initiated an emergency maintenance outage. The developers assured players that no exploitation of the vulnerability had occurred. Currently, both Japanese and global servers are back online, and players are set to receive a compensatory package of in-game currency.
The dinosaur MMO Path of Titans remains offline as well. In an announcement via their official X account, developer Alderon Games explained that the game and its website were taken down for up to three days as a precautionary measure. The studio confirmed that no player data was compromised during the incident.