As of today the market prices US Gov confirms PHP2Shell exploited by... at 89% — that is what traders are paying, in real money, for a share that pays $1.00 if it happens.
This market will resolve to “Yes” if the US Cybersecurity and Infrastructure Security Agency (CISA) adds CVE-2026-109618 or CVE-2026-109619 (the critical PHP vulnerabilities known as “PHP2Shell”) to its Known Exploited Vulnerabilities (KEV) Catalog by the listed date, 11:59 PM ET. Otherwise, this market will resolve to “No”.
The addition of either CVE will qualify. If either CVE has already been added to the KEV Catalog at the time this market is created, this market will resolve to “Yes”.
The “Date Added” shown for the relevant entry in the KEV Catalog will be used to determine whether the addition occurred within this market's timeframe.
The primary resolution source for this market will be CISA's Known Exploited Vulnerabilities Catalog (https://www.cisa.gov/known-exploited-vulnerabilities-catalog); however, official CISA announcements and a consensus of credible reporting may also be used.
Frequently Asked Questions
What are the current odds for US Gov confirms PHP2Shell exploited by...??
The market currently prices this at 89% (89¢ per share). Odds update continuously as traders buy and sell on Polymarket.
Will US Gov confirms PHP2Shell exploited by...?
December 31 is the market favorite at 89%, based on real money wagered by traders who have moved $15K through this market. Prediction-market odds have historically tracked outcomes more closely than polls, but they are a forecast, not a guarantee.
How much money is on US Gov confirms PHP2Shell exploited by...??
$15K has been traded on this market in total, including $3K in the last 24 hours, with $13K of resting liquidity in the order book.
When does US Gov confirms PHP2Shell exploited by...? resolve?
This market is scheduled to resolve on January 1, 2027. Winning shares pay out $1.00 each; losing shares expire worthless.
How does US Gov confirms PHP2Shell exploited by...? resolve?
This market will resolve to “Yes” if the US Cybersecurity and Infrastructure Security Agency (CISA) adds CVE-2026-109618 or CVE-2026-109619 (the critical PHP vulnerabilities known as “PHP2Shell”) to its Known Exploited Vulnerabilities (KEV) Catalog by the listed date, 11:59 PM ET. Otherwise, this market will resolve to “No”.
The addition of either CVE will qualify. If either CVE has already been added to the KEV Catalog at the time this market is created, this market will resolve to “Yes”.
The “Date Added” shown for the relevant entry in the KEV Catalog will be used to determine whether the addition occurred within this market's timeframe.
The primary resolution source for this market wil
Where can I bet on US Gov confirms PHP2Shell exploited by...?
This is a Polymarket prediction market — you trade YES/NO shares against other users rather than against a bookmaker. Polynter.net tracks the odds, volume and trader activity; trading itself happens on Polymarket.