Skip to content
Dark Souls II and III Servers Taken Offline Amid PHP Vulnerability Concerns

Dark Souls II and III Servers Taken Offline Amid PHP Vulnerability Concerns

First seen 30 Oct 2026, 16:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 17:14 UTC
  • •FromSoftware has taken Dark Souls II and III servers offline due to an unspecified issue.
  • •The shutdown follows critical PHP vulnerabilities allowing remote code execution.
  • •No timeline for server restoration has been provided by FromSoftware.

On October 30, 2026, FromSoftware took the online servers for Dark Souls II and III offline across all platforms due to an unspecified issue. This shutdown follows the discovery of vulnerabilities in PHP, specifically CVE-2026-109618 and CVE-2026-109619, which allow unauthenticated remote code execution. The decision to take the servers offline comes just two days after scheduled maintenance on Dark Souls II. Players have reported server issues prior to the announcement, and the shutdown disables co-op and PvP features. FromSoftware has not confirmed whether other titles, including Elden Ring, are affected. The company has promised to provide updates once a recovery timeline is established. The situation has raised concerns about potential exploitation similar to incidents in 2022.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
CVE-2026-109618 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-21
CVE-2026-109619 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-28
Scheduled maintenance completed
Scheduled maintenance for Dark Souls II servers was completed, according to TheGamer.
Cyberkendra
2026-10-30
Servers taken offline
FromSoftware announced the servers for Dark Souls II and III are offline due to an issue, with no return date provided.
TheGamer
2026-10-30
Follow-up announcement
A follow-up post confirmed the servers would remain offline and promised updates once a recovery timeline is known.
Cyberkendra

More articles in this cluster (3)

Following this threat?

Track Bandai Namco and CVE-2026-109618 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 2

Common questions

Which games are affected by the server shutdown?
The online servers for Dark Souls II and Dark Souls III are currently offline across all platforms.
What vulnerabilities prompted the server shutdown?
The shutdown is linked to critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, which allow remote code execution.
Is there an estimated time for server restoration?
No, FromSoftware has not provided a timeline for when the servers will be restored.