{"uid":"cap_Zcy5WFgqc64oxV-6yfS1W","slug":"agentdatafeed-security-advisories-1d82138d","name":"AgentDataFeed Security Advisories","description":"Factual datasets for AI agents, paid per query with x402. Open EU public tenders from TED, EU funding calls and grants, Amsterdam events from official permit notices, and security advisories with KEV and EPSS.","url":"https://agentdatafeed.com/v1/security-advisories?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","properties":{"q":{"type":"string","description":"Text in vulnerability name or summary (case-insensitive)"},"cve":{"type":"string","description":"Exact CVE ID, for example CVE-2021-44228"},"limit":{"type":"string","description":"1 to 100, default 50"},"offset":{"type":"string","description":"Default 0"},"vendor":{"type":"string","description":"Vendor name (substring, case-insensitive)"},"product":{"type":"string","description":"Product name (substring, case-insensitive)"},"min_epss":{"type":"string","description":"Minimum EPSS probability, 0 to 1"},"ransomware":{"type":"string","description":"known: only vulnerabilities with known ransomware campaign use"},"added_since":{"type":"string","description":"ISO date; KEV date added on or after"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"limit":5,"total":1,"offset":0,"dataset":"security-advisories","records":[{"kev":true,"cwes":["CWE-290"],"epss":null,"cve_id":"CVE-2026-104935","vendor":"Ivanti","product":"Connect Secure","summary":"Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.","source_id":"cisa-kev","source_url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","kev_due_date":"2026-10-16","retrieved_at":"2026-10-14T04:40:31.409512+00:00","verification":"open-data","kev_date_added":"2026-10-13","paid_placement":false,"required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","vulnerability_name":"Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability","known_ransomware_use":"Unknown"}],"updated":"2026-10-12T00:00:00Z"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_6-gK51HdlNLXjHtN8tymk","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fetches CISA KEV entries with EPSS exploit probability scores, ransomware campaign flags, patch-priority data, and required remediation actions for CVEs by vendor, product, or keyword","exampleAgentPrompt":"Is CVE-2023-34362 actively exploited — pull its CISA KEV entry with the remediation due date, required action, and FIRST EPSS probability score so I know how urgently to patch it.","exampleUseCases":[{"title":"Ransomware patch prioritization","prompt":"Pull all vulnerabilities in Fortinet products that are known to be used in ransomware campaigns and show me the CISA KEV due dates and required actions so I can prioritize our patching queue."},{"title":"High-EPSS KEV triage","prompt":"Give me the top 20 CISA KEV entries with an EPSS score above 0.95 — I want to see the CVE IDs, affected vendors, due dates, and required remediation actions to brief the security team."},{"title":"Recent KEV additions review","prompt":"What new vulnerabilities were added to the CISA KEV catalog since 2024-01-01? Show me the CVE IDs, impacted products, EPSS probabilities, and patch deadlines for anything added after that date."}],"resultDescription":"Returns a paginated list of vulnerability records from the CISA KEV catalog, each containing the CVE ID, vulnerability name, summary, affected vendor and product, CISA-mandated remediation due date, required action text, EPSS exploit probability score, ransomware campaign usage flag, and KEV date-added timestamp.","failureModes":["No results returned if CVE ID is malformed or not in the KEV catalog","Empty result set when vendor/product substring matches nothing — try broader search terms","Invalid min_epss value outside 0–1 range may return an error","Pagination offset beyond total results returns empty list","Rate limiting or payment failure (402) if x402 USDC payment is not processed correctly"],"whenToPreferThis":"Choose this endpoint when you need a single call that combines CISA KEV status, remediation deadlines, required actions, ransomware campaign association, and FIRST EPSS probability for one or more CVEs. It is ideal for patch prioritization workflows, security briefings, and vulnerability triage where you need authoritative exploit-activity signals rather than raw NVD data alone.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-13T12:39:14.180Z","isFirstParty":false,"canonicalSlug":"agentdatafeed-security-advisories-1d82138d"}