Capcom Pulls Street Fighter 5 From Sale and Takes Its Servers Offline for a Security Fix

Capcom has temporarily removed Street Fighter 5 from sale and switched off its online servers while it fixes a security problem. The fighting game is still playable offline for people who already own it, according to Video Games Chronicle.

The problem sits in PHP, a programming language widely used to run websites and online services. Capcom says the emergency maintenance will strengthen security tied to PHP as used in the PlayStation 4 and Steam versions of Street Fighter 5. The game's online features are offline while that work goes on.

Sales are being stopped in stages on the PlayStation Store and on Steam, the PC games storefront. Delisting means a game is no longer available to buy. Owners keep their copies, but new buyers cannot purchase the game on those two stores until the fix is finished.

Capcom has not said when online play will return, or when the game will go back on sale. It has not given an estimated date for either.

The fix follows a set of PHP security releases published by the PHP Foundation, the group that maintains the language, on 21 October 2026. The PHP Foundation said those updates address two critical vulnerabilities. Under certain conditions, an unauthenticated attacker could run code on affected servers, which means someone without a login could take control of part of a system. A critical rating is the top severity level the foundation uses.

A separate report from ABC7 described some websites shutting down temporarily around the world while operators applied the PHP fix.

For players, the practical picture is simple. The single-player and offline modes still work, while matchmaking, online rankings and any online-only content are unavailable for now. Anyone waiting to buy the game will have to wait for Capcom to announce a return to storefronts.

Capcom's announcement is also a reminder that a game's online side depends on other software behind the scenes. When a shared tool such as PHP needs an urgent patch, the publisher has to decide how much to switch off while it works. Here, the company has chosen to pause both sales and servers until the work is complete.