
Will CISA add at least 10 vulnerabilities to the KEV catalog in Nov 2026?
If CISA adds at least 10 vulnerabilities to the Known Exploited Vulnerabilities Catalog with a Date Added from Nov 1, 2026 through Nov 30, 2026 (as checked at cisa.gov at 10:00 AM ET on Dec 1, 2026), then the market resolves to Yes. Secondary rules: How this is resolved The market solely resolves to the dates visibly displayed as "Date Added" in the CISA Known Exploited Vulnerabilities Catalog at 10:00 AM ET on Dec 1, 2026. The month runs from Nov 1, 2026 through Nov 30, 2026. Payout criteria Each CVE entry with a Date Added within that period counts once. Entries are counted by their displayed Date Added, not by the date CISA announces them.








