When will CISA announce the addition of CVE-2026-109618 to the KEV catalog?: Will CISA announce the addition of CVE-2026-109618 to the KEV catalog before Nov 1, 2026?
Price has not been independently checked yet.
Probability history
Market-implied probabilities · All recorded historyDrag to move · pinch or ⌘/Ctrl+scroll to zoom
Shaded periods have no successful hourly price check.
Based on this market’s outcome prices, expressed as probabilities.
Resolution rules
If CISA announces the addition of CVE-2026-109618 to the KEV catalog before Nov 1, 2026, then the market resolves to Yes. The KEV catalog is CISA's Known Exploited Vulnerabilities Catalog at https://www.cisa.gov/known-exploited-vulnerabilities-catalog, which CISA also publishes as a JSON feed. CVE-2026-109618 is one of the two PHP vulnerabilities known as PHP2Shell. The addition counts on the Date Added that the catalog records for CVE-2026-109618. A later removal of the entry does not change a resolution already made. The following do NOT resolve this market to YES: An entry for CVE-2026-109619 alone. A CISA alert, advisory or statement urging organizations to patch the vulnerability. A CISA statement that it has or has not observed exploitation. A report of exploitation by anyone other than CISA.
Other legs of this event
A leg read alone is misleading; the others are beside it.Venue activity
Read from the venue this minuteDiscussion on Predxy
What Predxy's readers make of this market. Everyone can read; signed-in readers can write. The venue's own thread, when it has one, is the box below.Sign in to join the discussion.
Nobody has said anything here yet.
As of Nov 1, 11:21 AM UTC