{"uid":"cap_Y8uH9xoD7EcrZ3-55E8yk","slug":"dragons-eye-cve-batch-lookup-ad0cd5a5","name":"Dragons Eye CVE Batch Lookup","description":"Dragons Eye Lookup: CVE intel bundle: up to 50 CVEs in one call. The /v1/cve record for up to 50 CVEs (comma-separated). Charged only if at least half of them are covered; otherwise 404 with the covered list, not charged. Uncovered ids are listed and queued.","url":"https://api.ransomware-tracker.com/v1/cve-batch?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ids"],"properties":{"ids":{"type":"string","maxLength":1000,"description":"Comma-separated CVE ids, max 50"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"covered":2,"results":[{"cve_id":"CVE-2026-0257","summary":{"cvss_v3":9.1,"cvss_v3_severity":"CRITICAL","affected_products":["pan-os"]},"defenses":{"countermeasures":[{"url":"https://d3fend.mitre.org/technique/d3f:SoftwareUpdate/","label":"Software Update","tactic":"Harden","d3fend_id":"D3-SU"}]},"exploits":{"count":9,"items":[{"url":"https://github.com/example/CVE-2026-0257","name":"example/CVE-2026-0257","stars":1}]},"attack_flow":{"steps":[{"step":"initial_access","label":"Exploit public-facing application","tactic":"TA0001","technique":"T1190"}],"status":"ok","ai_generated":true},"exploitation":{"epss":0.969,"in_kev":true,"ransomware_use":"Unknown","has_public_exploit":true},"data_refreshed_at":"2026-10-17T06:00:00Z"}],"requested":2,"not_covered":[]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.5","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.5/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_e7VEtRQ4CgKijbV1TRp0g","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.5","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches full CVE intelligence bundles for up to 50 CVEs in a single call, including CVSS scores, exploit data, EPSS, KEV status, ransomware usage, and AI-generated ATT&CK attack flows.","exampleAgentPrompt":"Can you pull the full threat intel bundle for CVE-2024-1234, CVE-2023-44487, and CVE-2021-44228 — I need their CVSS scores, EPSS, whether they're in KEV, any public exploits, and the ATT&CK attack flow for each?","exampleUseCases":[{"title":"Patch prioritization triage for security team","prompt":"I have a list of 20 CVEs from our latest scanner report — CVE-2024-21762, CVE-2023-44487, CVE-2024-1709, and more. Can you pull the CVSS scores, EPSS probabilities, and whether any of them are in CISA's KEV list so I can prioritize what to patch first?"},{"title":"Ransomware exposure check for detected vulnerabilities","prompt":"Our EDR flagged these CVEs on our network: CVE-2023-27350, CVE-2021-34473, CVE-2022-41040. Can you check which ones are actively used by ransomware groups and whether there are public exploits out there?"},{"title":"Red team attack flow research","prompt":"I'm preparing a red team exercise and need the AI-generated ATT&CK attack flows for CVE-2024-3400 and CVE-2023-20198 — including the initial access techniques and recommended D3FEND countermeasures."}],"resultDescription":"Returns a JSON object with the count of covered CVEs, a results array where each entry contains: CVE ID, CVSS v3 score and severity, affected products, D3FEND countermeasures, exploit count and GitHub exploit links, AI-generated ATT&CK attack flow steps with tactic and technique IDs, EPSS score, KEV inclusion status, ransomware use flag, and public exploit availability. Also returns the total requested count and a list of uncovered CVE IDs (which are queued for future coverage). If fewer than half the requested CVEs are covered, returns 404 with the covered list and no charge.","failureModes":["404 returned if fewer than half of the requested CVEs are covered — no charge applied, covered list still returned","Invalid or malformed CVE IDs may be skipped or returned as uncovered","Exceeding 50 CVEs in a single request may be rejected","Network or API downtime returns standard HTTP 5xx errors","Payment failure (x402) results in request not being processed"],"whenToPreferThis":"Use this endpoint when you need to enrich multiple CVEs (up to 50) in a single efficient call instead of making individual CVE lookups. It is ideal for batch vulnerability triage, patch prioritization workflows, or SIEM/SOAR integrations where ransomware risk, EPSS, KEV status, and ATT&CK attack flows are all needed together. Prefer this over the single-CVE endpoint whenever processing scanner output, alert batches, or vulnerability reports containing multiple CVE identifiers.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-27T12:37:42.919Z","isFirstParty":false,"canonicalSlug":"dragons-eye-cve-batch-lookup-ad0cd5a5"}