{"uid":"cap_pIiRbsKV-RIkHrMgF6ujD","slug":"cisa-kev-recent-additions-feed-ef4e90f8","name":"CISA KEV Recent Additions Feed","description":"CVEs CISA added to the Known Exploited Vulnerabilities catalog in the last 1-90 days, newest first, with vendor and product.","url":"https://vuln-intel.x402tookit.com/kev-recent?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":[],"properties":{"days":{"type":"integer","description":"Lookback days, 1 to 90, default 14"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"asOf":{"type":["null","string"]},"added":{"type":["array","null"],"items":{"type":"object","properties":{"cve":{"type":["null","string"]},"name":{"type":["null","string"]},"vendor":{"type":["null","string"]},"dueDate":{"type":["null","string"]},"product":{"type":["null","string"]},"dateAdded":{"type":["null","string"]},"ransomwareUse":{"type":["null","string"]}}}},"count":{"type":["null","number"]},"source":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"summary":{"type":["null","string"]},"verdict":{"type":["null","string"]},"byVendor":{"type":["null","object"],"properties":{"F5":{"type":["null","number"]},"ISC":{"type":["null","number"]},"WSO2":{"type":["null","number"]},"Adobe":{"type":["null","number"]},"Apple":{"type":["null","number"]},"Cisco":{"type":["null","number"]},"JFrog":{"type":["null","number"]},"Linux":{"type":["null","number"]},"Zyxel":{"type":["null","number"]},"Apache":{"type":["null","number"]},"Arista":{"type":["null","number"]},"Citrix":{"type":["null","number"]},"GitLab":{"type":["null","number"]},"Google":{"type":["null","number"]},"Strapi":{"type":["null","number"]},"Acronis":{"type":["null","number"]},"ProFTPD":{"type":["null","number"]},"Fortinet":{"type":["null","number"]},"MikroTik":{"type":["null","number"]},"Microsoft":{"type":["null","number"]},"WordPress":{"type":["null","number"]},"ONLYOFFICE":{"type":["null","number"]},"Check Point":{"type":["null","number"]},"ConnectWise":{"type":["null","number"]},"Zammad GmbH":{"type":["null","number"]}}},"degraded":{"type":["boolean","null"]},"sinceDate":{"type":["null","string"]},"sourceUrl":{"type":["null","string"]},"disclaimer":{"type":["null","string"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}},"catalogVersion":{"type":["null","string"]}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_La7roTi-Kgcr3L4n-2qpO","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns CVEs added to the CISA Known Exploited Vulnerabilities (KEV) catalog within the last 1–90 days, sorted newest first, with vendor, product, due date, and ransomware-use flag.","exampleAgentPrompt":"Show me all CVEs that CISA added to the Known Exploited Vulnerabilities catalog in the last 30 days, grouped by vendor so I can see who's been hit the most.","exampleUseCases":[{"title":"Weekly security patch prioritization","prompt":"Pull the CISA KEV additions from the last 7 days and tell me which vendors and products showed up so my team knows what to patch first this sprint."},{"title":"Ransomware threat briefing","prompt":"Get me all newly added CISA Known Exploited Vulnerabilities from the past 14 days and flag any that are linked to ransomware — I need this for a security briefing."},{"title":"Monthly compliance audit summary","prompt":"Retrieve the last 90 days of CISA KEV additions and give me a summary with a count by vendor so I can include it in our monthly vulnerability compliance report."}],"resultDescription":"A JSON object containing: total count of matching CVEs, timestamp of the data (asOf), a list of CVE records each with CVE ID, vulnerability name, vendor, product, date added, CISA remediation due date, and ransomware use classification, plus an aggregated byVendor breakdown, a human-readable summary, and an overall verdict on the threat landscape for the period.","failureModes":["days parameter out of range (must be 1–90) returns validation error","upstream CISA data temporarily unavailable causes empty or stale response","payment not processed results in 402 response before data is returned","network timeout if CISA feed is slow to respond"],"whenToPreferThis":"Use this endpoint when you need a time-bounded feed of newly catalogued actively-exploited CVEs from CISA, especially when you want vendor/product breakdowns and ransomware flags without querying individual CVEs. Prefer it over single-CVE lookup endpoints when monitoring for new threats across all vendors over a rolling window (up to 90 days). It is ideal for weekly security briefings, patch triage, and compliance reporting workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:20:04.189Z","isFirstParty":false,"canonicalSlug":"cisa-kev-recent-additions-feed-ef4e90f8"}