GOG Server Outage: Platform Down After PHP Flaw [Confirmed]

Digital PC games storefront GOG and its client launcher GOG Galaxy were abruptly taken offline on October 21, 2026, after cybersecurity teams detected a critical vulnerability in the PHP scripting language that triggered emergency patching across global web infrastructure. According to verified reports from PC Gamer, CD Projekt's digital storefront halted storefront operations and client synchronization at 8:00 AM Pacific Time for an emergency maintenance window lasting several hours. The swift shutdown followed public disclosure of critical zero-day security flaws affecting widespread web services, which simultaneously triggered service interruptions across the Finnish government portal and login gateways for major MMOs like Final Fantasy XIV. While GOG officials refrained from naming the exploit explicitly, cybersecurity specialists confirmed web server administrators worldwide rushed patch deployments to prevent remote code execution attacks. This abrupt outage reminds PC gamers of recent system-level security updates, similar to how players navigated the [COD MW4 BIOS Update Guide: TPM 2.0 & Secure Boot Fix [Confirmed]](/news/cod-mw4-bios-update-tpm-fix) to protect underlying hardware. Because GOG champions DRM-free digital distribution, already downloaded single-player titles remain fully accessible, but online multiplayer lobbies, cloud saves, and store checkouts remain paused until systems pass server integrity audits.