4chan, DeviantArt and Pokémon Home go offline as PHP flaw details leak before patch

Outages hit 4chan, DeviantArt, Wikimedia tools and Pokémon Home on October 21, 2026. Reports link them to two critical PHP vulnerabilities, rated CVSS 9.2, whose details leaked before the official security release. Fixes shipped the same day in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. DeviantArt cited only "temporarily down for maintenance."