Final Fantasy 14 and Pokemon titles down for PHP security patch
Emergency maintenance took Final Fantasy 14's login servers offline, while Pokemon Home, Sleep and Champions patched a flaw allowing remote code execution.
Final Fantasy 14's login servers were taken offline on October 21, 2026, for emergency maintenance to apply a security patch, with no timetable given for full service restoration. Players who were already logged in could continue playing during the maintenance, according to Game Rant.
The maintenance follows a vulnerability in the PHP programming language that has forced several online games to patch their servers. Pokemon Home, Pokemon Sleep and Pokemon Champions are also undergoing server maintenance to address the same PHP security flaw, and Umamusume: Pretty Derby is among the online titles affected.
The vulnerabilities are tracked as CVE-2026-109618 and CVE-2026-109619 and can allow remote code execution without authentication.
Days before the outage, Square Enix warned Final Fantasy 14 players about a round of account breaches. The game had also undergone two separate periods of server maintenance for unrelated issues before this outage.
Quick answers
Why is Final Fantasy 14 under emergency maintenance?
Final Fantasy 14's login servers were taken offline to apply a security patch for a PHP vulnerability that allows remote code execution without authentication.
Can I still play Final Fantasy 14 during the maintenance?
Players who were already logged in could continue playing during the maintenance, but the login servers were temporarily offline.
Which Pokemon games are affected by the PHP security patch?
Pokemon Home, Pokemon Sleep and Pokemon Champions are undergoing server maintenance to patch the PHP security flaw.