GOG and GOG Galaxy Offline for Maintenance Amid PHP Vulnerability Concerns

The digital storefront GOG and its associated launcher, GOG Galaxy, were taken offline for unscheduled maintenance on October 21, 2026. The outage, which the company stated would last "a couple of hours," began around 8 a.m. Pacific time. While GOG did not explicitly state the reason for the maintenance, the timing coincides with the discovery of critical vulnerabilities affecting the PHP scripting language, a widely used web development tool. Security teams across the internet have been scrambling to apply emergency patches to protect their services from potential mass attacks. The government of Finland was among those that took websites offline as a precautionary measure, and reports indicate that Final Fantasy XIV's login servers were also affected. The widespread nature of these PHP vulnerabilities has prompted numerous services to temporarily cease operations to ensure their systems remain secure.