From Dexerto · Zackerie Fairfax · · 1m
Pokemon, Umamusume Games Offline Due to PHP Vulnerability
Critical PHP security flaw forces major gaming services offline for emergency patches.
In brief
Critical PHP security flaw forces major gaming services offline for emergency patches. Nintendo and Cygames services globally halted after discovering critical PHP vulnerabilities that allow remote code execution. Originally reported by Dexerto.
Games Offline
Pokemon Sleep, Pokemon HOME, Pokemon Champions and major Japanese games taken offline for emergency maintenance.
Outages Started
Outages began on October 21, shortly before PHP security updates for the flaws were released.
Affected Services
Pokemon Sleep, Pokemon HOME, Pokemon Champions, Nintendo Switch 1 and 2 online services, Umamusume, Granblue Fantasy, Shadowverse, Princess Connect Re:Dive and CHUNITHM.
PHP Vulnerability Details
Two critical PHP vulnerabilities rated 9.2 out of 10 allow unauthenticated remote code execution.
Security Impact
Attackers could alter websites, steal information, install malicious software or attack other systems.
Emergency Fixes
Nintendo and Cygames taking services offline to apply patches or prevent potential attacks.
In short
Nintendo and Cygames services globally halted after discovering critical PHP vulnerabilities that allow remote code execution.
