{"uid":"cap__Qb4e6xQH12u3FOIhB6Z3","slug":"cisa-known-exploited-vulnerabilities-kev-lookup-9ee992c9","name":"CISA Known Exploited Vulnerabilities (KEV) Lookup","description":"Check CVEs against CISA's Known Exploited Vulnerabilities catalog or search it by vendor/product: date added, remediation due date, ransomware use, CWE and required action. Use to prioritise patching.","url":"https://bess-x402.onrender.com/v1/security/kev?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":[],"properties":{"q":{"type":"string","description":"Vendor or product words, e.g. fortinet"},"cve":{"type":"string","description":"CVE id, e.g. CVE-2021-44228"},"days":{"type":"integer","description":"Only entries added in the last N days"},"limit":{"type":"integer","description":"Maximum number of results (1-100)"},"ransomware":{"type":"boolean","description":"Only known ransomware use"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_mNn0n2H5hBmXrfMCh6Llf","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Check CVEs against CISA's Known Exploited Vulnerabilities catalog or search by vendor/product, with date added, remediation due date, ransomware use, and required action.","exampleAgentPrompt":"Is CVE-2021-44228 (Log4Shell) in CISA's Known Exploited Vulnerabilities catalog? If so, tell me the date it was added, the remediation due date, and whether it's associated with ransomware.","exampleUseCases":[{"title":"Patch prioritization for Fortinet products","prompt":"Search CISA's KEV catalog for all Fortinet vulnerabilities and show me the remediation due dates and whether any are linked to ransomware — I need to figure out which patches to push first."},{"title":"Verify specific CVE exploitation status","prompt":"Check if CVE-2023-34362 is in CISA's known exploited vulnerabilities list and tell me what required action CISA recommends for it."},{"title":"Track newly added KEV entries","prompt":"Show me all vulnerabilities added to the CISA Known Exploited Vulnerabilities catalog in the last 7 days, and flag any that are associated with ransomware."}],"resultDescription":"Returns matching entries from the CISA KEV catalog, each including the CVE ID, vendor, product name, vulnerability name, date added to the catalog, remediation due date, whether the CVE has known ransomware use, CWE classification, and CISA's required action. Results are filtered by the provided query parameters (CVE ID, vendor/product keywords, recency window, ransomware flag, and result limit).","failureModes":["CVE not found in KEV catalog — returns empty results (not all CVEs are in KEV, only actively exploited ones)","Invalid CVE format causes no match — ensure format is CVE-YYYY-NNNNN","No results for vendor/product query if search terms don't match CISA's naming conventions","Rate limiting or service unavailability from the underlying render.com hosted service","Stale data if CISA catalog has not been recently synced"],"whenToPreferThis":"Use this endpoint when you need to check whether specific CVEs are actively exploited in the wild according to CISA, or when you need to prioritize patching decisions based on official U.S. government threat intelligence. Prefer this over generic CVE databases (NVD, Mitre) when the key question is 'is this being exploited right now and do I have a federal remediation deadline?' It is especially valuable for ransomware-aware patch triage and compliance with CISA's Binding Operational Directive 22-01.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T12:34:58.010Z","isFirstParty":false,"canonicalSlug":"cisa-known-exploited-vulnerabilities-kev-lookup-9ee992c9"}