No impact incident

Xsolla: Proactive notice: PHP security vulnerabilities

Current status of Xsolla: Operational — live Xsolla status

Timeline

1. Oct 21, 2026, 17:12 UTC
   monitoring
   We are aware of critical security vulnerabilities in PHP, announced publicly on 20 October 2026. We are actively patching and mitigating affected systems, and added protections are in place at our web application firewall layer. No action is required from you . If any change could affect your services, we will post here before it begins.

Updates as published by Xsolla (original).