Sakura Internet moved on PHP flaws hours before Japan's PM

Sakura Internet froze part of its cloud service on Wednesday, October 21, and withdrew phpMyAdmin, phpPgAdmin and pgAdmin from its Database Appliance offering because of two critical PHP flaws, with no restart date given; its Database Cluster service remained up. Later that day, Prime Minister Sanae Takaichi urged website operators on X to patch by 11 p.m. Japan time or temporarily shut public sites, and the National Cybersecurity Office said at 10:57 p.m. that fixes were available. The flaws, CVE-2026-109618 and CVE-2026-109619, each scored 9.2 out of 10 and could let attackers execute code on unpatched servers. Cygames and pixiv also announced emergency maintenance.