When will CISA announce the addition of CVE-2026-109618 to the KEV catalog?
As of Mon, 26 Oct 2026 10:51:41 UTC, Kalshi traders price Before Apr 1, 2027 (90.0%), Before Nov 15, 2026 (74.0%), Before Nov 1, 2026 (66.0%). The market has $2K in volume and closes on Thu, 08 Apr 2027.
Updated:
Current odds
| Outcome | Chance | Yes price | No price |
|---|---|---|---|
| Before Apr 1, 2027 | 90.0% | 90.0¢ | 10.0¢ |
| Before Nov 15, 2026 | 74.0% | 74.0¢ | 26.0¢ |
| Before Nov 1, 2026 | 66.0% | 66.0¢ | 34.0¢ |
Market details
- Venue: Kalshi
- Volume: $2K
- Liquidity: $2K
- Closes:
Resolution rules
Each outcome is a separate contract with its own rules. The rules for Before Apr 1, 2027:
If CISA announces the addition of CVE-2026-109618 to the KEV catalog before Apr 1, 2027, then the market resolves to Yes. The KEV catalog is CISA's Known Exploited Vulnerabilities Catalog at https://www.cisa.gov/known-exploited-vulnerabilities-catalog, which CISA also publishes as a JSON feed. CVE-2026-109618 is one of the two PHP vulnerabilities known as PHP2Shell. The addition counts on the Date Added that the catalog records for CVE-2026-109618. A later removal of the entry does not change a resolution already made. The following do NOT resolve this market to YES: An entry for CVE-2026-109619 alone. A CISA alert, advisory or statement urging organizations to patch the vulnerability. A CISA statement that it has or has not observed exploitation. A report of exploitation by anyone other than CISA.
Sources
Related markets
- Venezuela leader end of 2026?
- Who will leave their role in the Trump administration this year?
- Will Trump buy at least part of Greenland?
- Will marijuana be rescheduled?
- Will Americans receive tariff stimulus checks?
- Will Trump be impeached?
DOXA is a liquidity aggregator for prediction markets that compares odds and depth across Polymarket, Kalshi and others and routes each trade for best execution with an AI assistant.