4chan, DeviantArt and Pokémon Home go offline as PHP flaw details leak before patch

On October 21, 2026, outages hit 4chan, DeviantArt, Wikimedia tools and Pokémon Home. Reports link them to two critical PHP vulnerabilities, rated CVSS 9.2, whose details leaked before the official security release. The release shipped fixes the same day in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. DeviantArt cited only "temporarily down for maintenance."