{"uid":"cap_ThMI0BfC6e_-bIlpgg87G","slug":"signaldesk-ai-cisa-kev-search-146138c7","name":"SignalDesk AI – CISA KEV Search","description":"Evidence-backed autonomous AI jobs and paid data tools. Queue/D1/cron run outside the chat; free quotas and bounded execution apply.","url":"https://x402-agent.kariguetoazul.workers.dev/api/security/kev-search?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["q"],"properties":{"q":{"type":"string","maxLength":200,"minLength":1,"description":"Search query."},"limit":{"type":"integer","maximum":20,"minimum":1,"description":"Results, default 5."}},"additionalProperties":false}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"total":389,"source":{"license":"US government public data","provider":"CISA","expires_at":"2026-10-02T10:44:48.006Z","fetched_at":"2026-10-02T09:44:48.006Z","source_url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","transformed":true},"results":[{"cve":"CVE-2026-65660","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","vendor":"Microsoft","product":"SharePoint","due_date":"2026-09-28","date_added":"2026-09-25"},{"cve":"CVE-2026-81963","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","vendor":"Microsoft","product":"Windows","due_date":"2026-09-22","date_added":"2026-09-08"},{"cve":"CVE-2026-85880","action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","vendor":"Microsoft","product":"Windows","due_date":"2026-09-22","date_added":"2026-09-08"}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_BO-c6z-v4IWHyXkQIC3NA","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Searches the CISA Known Exploited Vulnerabilities (KEV) catalog by keyword, returning matching CVE records with vendor, product, due date, and remediation actions","exampleAgentPrompt":"Search the CISA Known Exploited Vulnerabilities catalog for any CVEs affecting Microsoft SharePoint and show me up to 10 results including their patch deadlines and recommended actions.","exampleUseCases":[{"title":"Patch compliance check for IT team","prompt":"Pull up all the CISA Known Exploited Vulnerabilities for Windows from the KEV catalog — I need to see the due dates and what actions we're supposed to take, give me up to 15 results."},{"title":"Vendor-specific CVE investigation","prompt":"Search the CISA KEV list for anything related to Cisco IOS and show me the top 5 results with their CVE IDs and remediation guidance."},{"title":"Security briefing on recent exploits","prompt":"I'm putting together a threat briefing — can you query the CISA Known Exploited Vulnerabilities database for 'Apache' and return up to 20 matches so I can see what's actively being exploited?"}],"resultDescription":"Returns a JSON object with a total count of matching records, source metadata (CISA provider info, license, fetch/expiry timestamps, source URL), and an array of results each containing the CVE identifier, affected vendor, affected product, date added to the KEV catalog, patch due date, and CISA-recommended remediation action text.","failureModes":["Missing or empty 'q' query parameter returns a validation error","Query exceeding 200 characters is rejected","Limit value outside 1–20 range is rejected","CISA upstream data unavailable may cause stale or failed responses","No matching results returns an empty results array with total:0","Payment of 0.003 USDC not provided or rejected results in HTTP 402"],"whenToPreferThis":"Choose this endpoint when you need to search the authoritative CISA Known Exploited Vulnerabilities catalog by keyword — especially for compliance workflows (CISA BOD), patch prioritization, or threat intelligence enrichment. It provides pre-transformed, structured KEV data with source provenance and expiry metadata, making it ideal for automated security pipelines without needing to parse CISA's raw JSON feed directly.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T00:42:09.273Z","isFirstParty":false,"canonicalSlug":"signaldesk-ai-cisa-kev-search-146138c7"}