Another critical PHP security flaw in 2026?
Why it moved: +14 points at 16:26 UTC, after Ars Technica: Hackers got a four-day head start on epic PHP2Shell vulnerability — the latest article on its stories before the jump; what followed, not what caused it.
Price data
| Time | Chance of yes |
|---|---|
| now | 34% |
| 23 Oct, 11:41 UTC | 34% |
| 23 Oct, 10:17 UTC | 34% |
| 23 Oct, 09:55 UTC | 34% |
| 23 Oct, 09:27 UTC | 34% |
| 23 Oct, 08:53 UTC | 31% |
| 23 Oct, 08:07 UTC | 32% |
| 23 Oct, 07:26 UTC | 30% |
| 23 Oct, 06:59 UTC | 30% |
| 23 Oct, 06:18 UTC | 30% |
| 23 Oct, 05:46 UTC | 31% |
| 23 Oct, 05:25 UTC | 30% |
| 23 Oct, 04:57 UTC | 30% |
| 23 Oct, 04:24 UTC | 29% |
| 23 Oct, 03:41 UTC | 33% |
| 23 Oct, 02:33 UTC | 41% |
| 23 Oct, 00:28 UTC | 40% |
| 22 Oct, 23:48 UTC | 40% |
| 22 Oct, 23:27 UTC | 41% |
| 22 Oct, 22:53 UTC | 46% |
| 22 Oct, 22:18 UTC | 39% |
| 22 Oct, 17:45 UTC | 33% |
| 22 Oct, 17:24 UTC | 35% |
| 22 Oct, 16:54 UTC | 38% |
| 22 Oct, 16:26 UTC | 36% |
| 22 Oct, 14:54 UTC | 22% |
| 22 Oct, 12:00 UTC | 23% |
| 22 Oct, 10:31 UTC | 30% |
| 22 Oct, 06:39 UTC | 31% |
| 22 Oct, 04:27 UTC | 32% |
| 22 Oct, 03:16 UTC | 33% |
| 22 Oct, 02:26 UTC | 32% |
| 22 Oct, 01:44 UTC | 33% |
| 22 Oct, 00:24 UTC | 34% |
Your call. How does this end?
Free, no money involved. Calls are scored against the market's price when you make them, so backing an underdog that wins scores most. Leaderboard · Your calls
Does the market have this right?
Email me when the odds move
What counts
The market resolves to Yes if a critical PHP vulnerability is publicly disclosed between now and December 31, 2026, at 11:59 PM ET, meeting specific criteria including a CVE ID and a CVSS score of 9.0 or higher from the PHP project or NVD.
Written from Polymarket's resolution rules by the same model that writes our headlines. The rules on Polymarket are what decides it.
Outcomes
- Yes 34%
- No 66%
Trade this market on Polymarket →