Will a zero-day in a major VPN or firewall product be added to CISA KEV within 30 days of disclosure in 2026?

Edge devices (VPNs, firewalls) remain the highest-value initial-access targets. This market tracks whether a 2026 zero-day in a major product (Ivanti, Palo Alto, Fortinet, Cisco, Citrix, etc.) is added to the CISA KEV catalog within 30 days of public disclosure.

Resolution Criteria

Resolves YES if any 2026 zero-day affecting a major VPN/firewall vendor is added to the CISA Known Exploited Vulnerabilities catalog within 30 days of its public disclosure. Verified against the CISA KEV catalog. Resolves NO otherwise.