Proactive notice: PHP security vulnerabilities

Incident Report for Xsolla

Monitoring

We are aware of critical security vulnerabilities in PHP, announced publicly on 20 October 2026. We are actively patching and mitigating affected systems, and added protections are in place at our web application firewall layer.

No action is required from you. If any change could affect your services, we will post here before it begins.

Posted Oct 21, 2026 - 10:12 PDT