Capcom has suspended Street Fighter 5 sales and disabled online functionality on PS4 and Steam while it addresses a PHP security issue. Offline content remains available, but there is no return date yet.
Image: IGDB
Store links: Street Fighter V on Steam, Street Fighter V: A Shadow Falls on Steam
Capcom pulls Street Fighter 5 while online services are disabled
Street Fighter 5 has been temporarily removed from sale on PlayStation Store and Steam while Capcom keeps the game’s online functionality offline for emergency security work. In a notice posted through the official Street Fighter account on X, and reported by Video Games Chronicle, EventHubs, and Shacknews, Capcom said it is working to “further strengthen security related to the PHP programming language” used in the PlayStation 4 and Steam versions of Street Fighter 5.
The immediate result is simple for players: Street Fighter 5 servers are down for content that requires online functionality, and new purchases are being suspended in stages on the two platforms where the game is sold. Capcom’s notice says offline content remains available and can still be played by people who already own the game.
Capcom has not announced a target time for online services to return. VGC reports that the publisher has also not provided an estimate for when Street Fighter 5 will be restored to PlayStation and Steam storefronts. That uncertainty is the real pressure point here. This is a 2016 fighting game whose sequel has been out since 2023, but its matchmaking, online features, and store availability still depend on infrastructure Capcom now considers serious enough to shut off.
The PHP security issue behind the shutdown
Capcom’s public explanation ties the outage to security work around PHP, a server-side programming language widely used in web development. VGC reports that a group of cybersecurity researchers and organizations used AI last week to discover two major PHP vulnerabilities, leading some sites and services to go offline temporarily while patches were applied.
EventHubs connected the timing to a PHP Foundation warning from October 20, which described two critical vulnerabilities scheduled for an October 21 security release, both rated CVSSv4 9.2. EventHubs also reported that the vulnerability could allow bad actors to take control of servers running PHP without authentication. That technical description comes from EventHubs’ reporting on the broader PHP issue, while Capcom’s confirmed statement is narrower: Street Fighter 5 uses PHP in its PS4 and Steam versions, and Capcom is performing emergency maintenance to strengthen security around it.
That distinction matters. Capcom has not said Street Fighter 5 was exploited, and the provided notices do not state that player accounts, payment information, or personal data were accessed. The confirmed action is preventative and operational: online features are unavailable, and purchases are being suspended until Capcom completes the fix.
What is offline, what still works, and who is affected
Capcom’s wording covers the PlayStation 4 and Steam versions of Street Fighter 5. Those are also the platforms EventHubs identifies as the only platforms on which Street Fighter 5 is available. According to Capcom’s notice, “content requiring online functionality is currently unavailable,” while “offline content remains available and can still be enjoyed.”
For current owners, that means the game has not been bricked. If you already have Street Fighter 5 installed or in your library, Capcom says offline content remains playable. If your plan for the night was online sets, ranked or casual matchmaking, or any feature that depends on the game’s online services, assume that is unavailable until Capcom announces otherwise.
For prospective buyers, the answer is harsher. Capcom says sales on PlayStation Store and Steam will be suspended in stages until the fix is completed. That staged language means availability may not disappear everywhere at the exact same minute, but the publisher’s direction is clear: Street Fighter 5 removed from sale is part of the response, not a store error.
A strange maintenance window for an older competitive game
The timing stood out before Capcom explained it. EventHubs reported on October 21 that Capcom had announced emergency maintenance for Street Fighter 5 to address an “unintended issue,” without initially naming the PHP vulnerability. That same EventHubs report noted how odd the maintenance looked because Street Fighter 5 launched in February 2016, received its final DLC fighter Luke in November 2021, and was succeeded by Street Fighter 6 in June 2023.
That context changes how players read the outage. Street Fighter 5 is no longer Capcom’s current competitive platform, but it still has an active legacy audience and a large library of paid content. A security flaw in old infrastructure can force action even after a game leaves the main stage. From a fighting game player’s point of view, this is the online-era version of matchup knowledge: the system you forgot about can still hit you if it remains active.
The same week also saw emergency maintenance announced for Dragon Ball FighterZ. EventHubs reported that Dragon Ball Games said Dragon Ball FighterZ online services would be temporarily unavailable starting October 21 to enhance security, with online battles, news, and other online features inaccessible and no end time listed. Capcom’s confirmed PHP statement applies to Street Fighter 5, not Dragon Ball FighterZ, but the timing explains why players immediately suspected a wider security response across older online fighting games.
Delisting raises an old Capcom concern, but this case is not identical
The word “temporarily” carries baggage for Capcom fighting game players on PC. EventHubs points to Street Fighter X Tekken, which was temporarily removed from Steam in 2021 because of an installation issue related to Games for Windows Live. EventHubs reports that in 2026, Street Fighter X Tekken is still unavailable for purchase on Steam, while its store page continues to say the purchase option was temporarily disabled during investigation.
That precedent is why some players are understandably nervous about Street Fighter 5’s store suspension. Still, the two situations are not the same based on the available source material. Street Fighter X Tekken’s Steam issue, as quoted by EventHubs, concerns Games for Windows Live installation trouble. Street Fighter 5’s current suspension is tied by Capcom to PHP security work affecting online functionality on PS4 and Steam.
The practical takeaway is to avoid over-reading the delisting as a permanent retirement unless Capcom says so. The confirmed statement is that sales are suspended until the fix is completed. The concern is fair because Capcom has left at least one older fighting game in “temporary” purchase limbo before, but Street Fighter 5’s current notice still frames this as emergency maintenance tied to a specific security issue.
How players should handle the outage
If you already own Street Fighter 5, do not delete your installation unless you have a separate reason to do so. Capcom says offline content remains available, and none of the provided notices says owners are losing access to the game itself. If your routine depends on online matches, wait for an official update before planning sessions or events around Street Fighter 5 online play.
If you were planning to buy Street Fighter 5, the safest assumption is that you may not be able to purchase it on PlayStation Store or Steam while Capcom’s staged suspension rolls out. There is no announced price change, relisting date, or replacement purchase path in the source material. Street Fighter 6 remains the current series entry, but Capcom has not framed this Street Fighter 5 outage as a migration push or end-of-service announcement.
For tournament organizers, streamers, and lab monsters keeping Street Fighter 5 alive, the only reliable plan is offline play until Capcom confirms restoration. The publisher has apologized for the inconvenience and asked for patience, but it has not given a completion window. In match terms, the round is paused with no visible timer.