Cygames Saga Building from northeast 2021-10

DevelopingReported 2026-10-21 20:40

Critical PHP vulnerabilities trigger emergency maintenance across Japan

PHP developers disclosed two high-severity vulnerabilities (CVSS 9.2) on October 20, 2026, with patches scheduled for October 21. Major Japanese services including Sakura Internet, Cygames, and pixiv announced emergency maintenance. CERT-EU flagged the CVEs; remote code execution is possible if exploited.

In depthRead the in-depth story

Why it matters. WordPress and countless other websites and services relying on PHP are at risk; the widespread emergency maintenance signals a significant disruption to online services in Japan and potentially globally.

Who and what it touches

Into PHP

WordPressuses
Drupaluses
Apache 2uses
Drupaluses
Joomlauses

From PHP

Websitesenables
Magentoenables
memoryuses

Each line is a relation with evidence behind it, drawn in the direction it points. A line shows that two things are connected, not how far this change reaches.

Evidence

日日経 xTECHMedia2026-10-21 20:40
View source

Evidence record

How AiSeek assessed the claims behind this change, and on what evidence. It is a record of an assessment, not a certificate that a claim is true.

Claim 1

Class: Fact

Stated directly by a source, with the passage located.

Check: Completed
Assessment: Supported by the evidence
Still current: Current

Independence0 origins confirmed distinct · 6 not shown to be independent · 6 pieces of evidence

Receipt digestsha256:07d606cd…7542b6Check integrity

Revisions

2026-10-22 15:20Fact · Supported by the evidence · CurrentRevised the receipt before it
2026-10-22 14:53Fact · Supported by the evidence · CurrentRevised the receipt before it
2026-10-22 00:01Fact · Supported by the evidence · CurrentRevised the receipt before it
2026-10-21 21:00Fact · Supported by the evidence · CurrentRevised the receipt before it
2026-10-21 20:34Fact · Supported by the evidence · CurrentRevised the receipt before it
2026-10-21 16:42Fact · Supported by the evidence · CurrentFirst receipt

Claim 2

Class: Fact

Stated directly by a source, with the passage located.

Check: Completed
Assessment: Supported by the evidence
Still current: Current

Independence0 origins confirmed distinct · 1 not shown to be independent · 1 pieces of evidence

Receipt digestsha256:69551d9b…c407c4Check integrity

How it looked when first published is older than the 7 days your plan can replay. See plans

A receipt is not a certificate of truth. It shows how AiSeek assessed a claim and that the record has not been altered since. How receipts work