CVE

CVE API

Query CVE records with severity, vendor, date and CVSS filters. Includes EPSS scores and KEV status. No exploit code or proof-of-concept payloads.

Example use cases

•Vulnerability management dashboard integration
•Patch prioritization workflows
•Vendor risk assessment automation
•Compliance audit evidence collection

Endpoints

GET/api/v1/cves

List CVEs

CVEs · Enterprise

CVE Response

CVE record with severity scoring, vendor details and patch status.

cveId*

CVE identifier

string

title*

Vulnerability title

string

severity*

Severity level: critical, high, medium, low

string

cvssScore*

CVSS v3.1 base score

number

vendor*

Affected vendor name

string

patchAvailable*

Whether a vendor patch is available

boolean

isKev*

KEV catalog inclusion status

boolean

publishedAt*

ISO 8601 publish date

string

{ "cveId": "CVE-2026-0001", "title": "Buffer overflow in example service", "severity": "high", "cvssScore": "8.1", "vendor": "Example Corp", "patchAvailable": "true", "isKev": "false", "publishedAt": "2026-05-20" }

Safety notes

• No exploit payloads or proof-of-concept code included.

• CVSS vectors are informational only — not actionable exploit instructions.

• Vendor names in mock data are fictional or public examples.