---
title: "Will CISA issue an Emergency Directive covering the PHP flaws?"
canonical_url: https://betcrypto.now/events/will-cisa-issue-an-emergency-directive-covering-the-php-flaws
status: live
trading_closes_at: 2026-12-01T04:59:00+00:00
total_volume_usd: 1670.99
venues: ["Kalshi"]
categories: ["Politics"]
prices_as_of: 2026-11-02T03:16:56+00:00
publisher: BetCrypto
data_api: https://betcrypto.now/api/v1/events/will-cisa-issue-an-emergency-directive-covering-the-php-flaws
---

# Will CISA issue an Emergency Directive covering the PHP flaws?

Live · $1,671 traded · listed on Kalshi

## About

If CISA announces the issuance of an Emergency Directive requiring Federal Civilian Executive Branch agencies to act on the PHP vulnerabilities CVE-2026-109618 or CVE-2026-109619 before Dec 1, 2026, then the market resolves to Yes.

An Emergency Directive counts once CISA has published it on its Cybersecurity Directives page. It need not name CVE-2026-109618 or CVE-2026-109619, but its required actions must cover those vulnerabilities in PHP, such as requiring agencies to patch, mitigate, inventory or remove affected PHP systems.

A new version of an existing Emergency Directive counts only if that version itself adds required actions covering these vulnerabilities.

The following do NOT resolve this market to YES:
A Binding Operational Directive.
A supplemental direction to an existing Emergency Directive.
An addition to the Known Exploited Vulnerabilities catalog, and any remediation deadline that follows from one.
A CISA alert, advisory or other guidance urging agencies or the public to patch.
A statement that an Emergency Directive is under consideration or forthcoming.

_From Kalshi's listing._

## Main market

| Outcome | Probability | Cheapest | Kalshi |
|---|---|---|---|
| No | 76% | 79¢ on Kalshi | 79¢ |
| Yes | 25% | 28¢ on Kalshi | 28¢ |

## Open on a venue

- [Kalshi](https://betcrypto.now/go/e/965267?via=md)

---

Probability is the cross-venue consensus (book midpoints, 0–100%). Venue columns are what buying costs there (the ask). Prices move constantly; re-check at the canonical URL or the [JSON API](https://betcrypto.now/api/v1/events/will-cisa-issue-an-emergency-directive-covering-the-php-flaws).

BetCrypto is an odds-comparison and information service. It accepts no wagers and gives no betting or financial advice; prediction-market availability depends on where you live.