Skip to content
ThePolyAcademy
EN

US Gov confirms PHP2Shell exploited by...?

Markets

  • October 31

    • Yes84%
    • No17%

    Volume $2K · Liquidity $11.3K

  • December 31

    • Yes90%
    • No11%

    Volume $1.1K · Liquidity $16.8K

Resolution rules

This market will resolve to “Yes” if the US Cybersecurity and Infrastructure Security Agency (CISA) adds CVE-2026-109618 or CVE-2026-109619 (the critical PHP vulnerabilities known as “PHP2Shell”) to its Known Exploited Vulnerabilities (KEV) Catalog by the listed date, 11:59 PM ET. Otherwise, this market will resolve to “No”. The addition of either CVE will qualify. If either CVE has already been added to the KEV Catalog at the time this market is created, this market will resolve to “Yes”. The “Date Added” shown for the relevant entry in the KEV Catalog will be used to determine whether the addition occurred within this market's timeframe. The primary resolution source for this market will be CISA's Known Exploited Vulnerabilities Catalog ( however, official CISA announcements and a consensus of credible reporting may also be used.

How to read these odds

Each price runs from $0 to $1 and can be read as the probability the market assigns to an outcome: $0.62 means roughly 62%. Prices move with every trade, so they are a crowd estimate, not a guarantee. Before trading, check the resolution rules above, the volume and the liquidity, and only risk money you can afford to lose.

Probability calculators · Glossary · Free courses

More Tech markets