US Gov confirms PHP2Shell exploited by...?
As of Wed, 21 Oct 2026 18:18:41 UTC, Polymarket traders price December 31 (89.5%), October 31 (76.5%). The market has $3K in volume and closes on Fri, 01 Jan 2027.
Updated:
Current odds
| Outcome | Chance | Yes price | No price |
|---|---|---|---|
| December 31 | 89.5% | 89.5¢ | 10.5¢ |
| October 31 | 76.5% | 76.5¢ | 23.5¢ |
Market details
- Venue: Polymarket
- Volume: $3K
- Liquidity: $22K
- Closes:
Resolution rules
This market will resolve to “Yes” if the US Cybersecurity and Infrastructure Security Agency (CISA) adds CVE-2026-109618 or CVE-2026-109619 (the critical PHP vulnerabilities known as “PHP2Shell”) to its Known Exploited Vulnerabilities (KEV) Catalog by the listed date, 11:59 PM ET. Otherwise, this market will resolve to “No”. The addition of either CVE will qualify. If either CVE has already been added to the KEV Catalog at the time this market is created, this market will resolve to “Yes”. The “Date Added” shown for the relevant entry in the KEV Catalog will be used to determine whether the addition occurred within this market's timeframe. The primary resolution source for this market will be CISA's Known Exploited Vulnerabilities Catalog (https://www.cisa.gov/known-exploited-vulnerabilities-catalog); however, official CISA announcements and a consensus of credible reporting may also be used.
Sources
Related markets
- Which companies will be acquired before 2027?
- Satoshi's identity be proven by...?
- Democratic Presidential Nominee 2028
- Which companies will be acquired before 2027?
- Republican Presidential Nominee 2028
- Next French Presidential Election
DOXA is a liquidity aggregator for prediction markets that compares odds and depth across Polymarket, Kalshi and others and routes each trade for best execution with an AI assistant.