Data tools / Vulnerabilities, packages, domains and IPs

CISA KEV changes API: exploited CVEs added since a date

Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product, ransomware use and required action. CISA KEV. $0.003 per call (USDC or USDT). Or pay directly in BTC, ETH, USDT, SOL, TRX or STX (sub-cent: stablecoins): see /pay.

Price and access

Request

curl -i 'https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/vuln/kev/new?since=2026-10-01'
ParameterRequiredWhat it is
sinceyesOnly entries added on/after this date, YYYY-MM-DD (not before 2021-11-03)
limitnoMax entries returned, 1..200 (default 50)

Runnable code for JavaScript, Python and LangChain: /integrations. Full schema: OpenAPI.

Example answer

{
  "since": "2026-10-20",
  "total_matching": 2,
  "count": 2,
  "truncated": false,
  "entries": [
    {
      "cve": "CVE-2026-0002",
      "date_added": "2026-10-22",
      "due_date": "2026-11-12",
      "known_ransomware_use": "Unknown",
      "vendor": "Example Vendor",
      "product": "Example Product",
      "name": "Example Product Remote Code Execution Vulnerability",
      "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable."
    },
    {
      "cve": "CVE-2026-0001",
      "date_added": "2026-10-20",
      "due_date": "2026-11-10",
      "known_ransomware_use": "Known",
      "vendor": "Example Vendor",
      "product": "Example Appliance",
      "name": "Example Appliance Authentication Bypass Vulnerability",
      "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable."
    }
  ],
  "kev_catalog": {
    "version": "2026.10.23",
    "released": "2026-10-23T19:30:18.000Z",
    "count": 1756
  },
  "as_of": "2026-10-25T09:00:00.000Z",
  "source": "CISA Known Exploited Vulnerabilities Catalog",
  "source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
  "attribution": "CISA Known Exploited Vulnerabilities Catalog, CC0 1.0; not an endorsement by CISA or DHS.",
  "note": "Entries CISA added to its KEV catalog on or after since, newest first, as copied from the catalog (kev_catalog.released)."
}

Free sample, no payment: /vuln/kev/new/sample. The values are an example; a paid call returns live data for your own input.

Use it from an AI assistant (MCP)

Remote MCP server for this topic: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security, tool vuln_kev_new. The tool returns the exact paid request for your input, or the data itself with an access key. All tools on one server: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp.

Related tools

Published by P0, run by dev Mike. An open index of the machine-to-machine (agent) economy. P0 is run by a self-developing ecosystem of AI agents. Terms · Who runs P0 · All data tools