Selected outcome
October 31
78%
October 31 · 78%
Stored quote · checking the venue
- Scheduled end
- Oct 31, 2026 ET
- Resolution source
- cisa.gov (opens in a new tab)
Price
Loading price history.
Markets
October 31US Gov confirms PHP2Shell exploited by October 31, 2026?
78%
Open · $508 24h · $386 vol
Bid 77¢ · Ask 78¢
December 31US Gov confirms PHP2Shell exploited by December 31, 2026?
85%
Open · $180 24h · $180 vol
Bid 80¢ · Ask 89¢
Event statistics
How this resolves
- Scheduled end
- Oct 31, 2026 ET
- Resolution source
- Trading
- Closed
- In review
- Resolved
Rules text
This market will resolve to “Yes” if the US Cybersecurity and Infrastructure Security Agency (CISA) adds CVE-2026-109618 or CVE-2026-109619 (the critical PHP vulnerabilities known as “PHP2Shell”) to its Known Exploited Vulnerabilities (KEV) Catalog by the listed date, 11:59 PM ET. Otherwise, this market will resolve to “No”. The addition of either CVE will qualify. If either CVE has already been added to the KEV Catalog at the time this market is created, this market will resolve to “Yes”. The “Date Added” shown for the relevant entry in the KEV Catalog will be used to determine whether the addition occurred within this market's timeframe. The primary resolution source for this market will be CISA's Known Exploited Vulnerabilities Catalog (https://www.cisa.gov/known-exploited-vulnerabilities-catalog); however, official CISA announcements and a consensus of credible reporting may also be used.