US Gov confirms PHP2Shell exploited by... Odds
This market has resolved: October 31. Final prices are below.
| Outcome | Chance | Odds | 24h |
|---|---|---|---|
| October 31 ✓ | 100% | — | ▲ 28 |
| December 31 ✓ | 100% | — | ▲ 11 |
Price history
Resolution rules
This market will resolve to “Yes” if the US Cybersecurity and Infrastructure Security Agency (CISA) adds CVE-2026-109618 or CVE-2026-109619 (the critical PHP vulnerabilities known as “PHP2Shell”) to its Known Exploited Vulnerabilities (KEV) Catalog by the listed date, 11:59 PM ET. Otherwise, this market will resolve to “No”. The addition of either CVE will qualify. If either CVE has already been added to the KEV Catalog at the time this market is created, this market will resolve to “Yes”. The “Date Added” shown for the relevant entry in the KEV Catalog will be used to determine whether the addition occurred within this market's timeframe. The primary resolution source for this market will be CISA's Known Exploited Vulnerabilities Catalog (https://www.cisa.gov/known-exploited-vulnerabilities-catalog); however, official CISA announcements and a consensus of credible reporting may also be used.
Source: Polymarket. The venue's rules are final.
FAQ
How are prediction market odds calculated?
Each contract pays $1 if the outcome happens and $0 if it doesn't, so its price is the market's implied probability: a 60¢ contract means roughly a 60% chance. We show the last trade, or the midpoint between the best bid and ask when the order book is tight.
When does this market close?
Polymarket lists Jan 1, 2027 as the end date; this market has closed.
Where can I trade on US Gov confirms PHP2Shell exploited by...?
This market trades on Polymarket. Availability depends on where you live: Kalshi is a CFTC-regulated US exchange, while Polymarket's international site isn't available to US users (Polymarket US is a separate app). You must be 18 or older.