Will CISA issue an Emergency Directive covering the PHP flaws?
As of Fri, 23 Oct 2026 22:23:03 UTC, Kalshi traders price Yes (25.0%). The market has $2K in volume and closes on Tue, 08 Dec 2026.
Updated:
Current odds
| Outcome | Chance | Yes price | No price |
|---|---|---|---|
| Yes | 25.0% | 25.0¢ | 75.0¢ |
Market details
- Venue: Kalshi
- Volume: $2K
- Liquidity: $2K
- Closes:
Resolution rules
If CISA announces the issuance of an Emergency Directive requiring Federal Civilian Executive Branch agencies to act on the PHP vulnerabilities CVE-2026-109618 or CVE-2026-109619 before Dec 1, 2026, then the market resolves to Yes. An Emergency Directive counts once CISA has published it on its Cybersecurity Directives page. It need not name CVE-2026-109618 or CVE-2026-109619, but its required actions must cover those vulnerabilities in PHP, such as requiring agencies to patch, mitigate, inventory or remove affected PHP systems. A new version of an existing Emergency Directive counts only if that version itself adds required actions covering these vulnerabilities. The following do NOT resolve this market to YES: A Binding Operational Directive. A supplemental direction to an existing Emergency Directive. An addition to the Known Exploited Vulnerabilities catalog, and any remediation deadline that follows from one. A CISA alert, advisory or other guidance urging agencies or the public to patch. A statement that an Emergency Directive is under consideration or forthcoming.
Sources
Related markets
- Venezuela leader end of 2026?
- Who will leave their role in the Trump administration this year?
- Will Trump buy at least part of Greenland?
- Will marijuana be rescheduled?
- Will Americans receive tariff stimulus checks?
- Will Trump be impeached?
DOXA is a liquidity aggregator for prediction markets that compares odds and depth across Polymarket, Kalshi and others and routes each trade for best execution with an AI assistant.