CISA KEV Feed: Known Exploited Vulnerabilities API | Johto Data
Pricing
Pay per event
CISA KEV Feed: Known Exploited Vulnerabilities API | Johto Data
CISA Known Exploited Vulnerabilities (KEV) catalog as clean rows: vendor, product, date added, federal due date, days until due, required action, ransomware flag, CWEs. Filter by vendor, product, CVE, keyword or date. $9 per 1,000 CVEs.
Pricing
Pay per event
Rating
0.0
(0)
Developer
Jo
Maintained by CommunityActor stats
0
Bookmarked
1
Total users
0
Monthly active users
2 days ago
Last modified
Categories
Share
CISA KEV Feed: Known Exploited Vulnerabilities API
By Johto Data. One row per CISA Known Exploited Vulnerabilities (KEV) entry, newest first.
For AI agents
- Call:
{}returns the 10 newest KEV additions. Examples:{"vendors":["Fortinet"],"maxItems":5}·{"addedSince":"2026-10-01","ransomwareOnly":true}·{"cveIds":["CVE-2021-44228"]}. - Returns: vendor, product, date added, federal due date,
daysUntilDue,overdue, required action, ransomware use, CWEs. - Aliases:
keywordSearch,cveId,maxResults. - Not included: CVSS, EPSS, CPE and other non-KEV data.
| This Actor | Leading alternative | |
|---|---|---|
| Per CVE row | $0.0009 | $0.0018 |
| Run start | $0.0001 | none |
| Measured run time | 10 rows: 2.6 s | not measured |
Sample (run 7KfH8bIE0yXZ6dgxF, Oct 22 2026):
| cveId | vendor | product | kevDateAdded | kevDueDate | knownRansomware |
|---|---|---|---|---|---|
| CVE-2026-96656 | Plex | Media Server | 2026-10-20 | 2026-10-23 | false |
| CVE-2026-96655 | Plex | Media Server | 2026-10-20 | 2026-11-03 | false |
| CVE-2026-96654 | Plex | Media Server | 2026-10-20 | 2026-10-23 | false |
Output schema
| Field | Meaning |
|---|---|
cveId, vendor, product, vulnName, shortDescription | Identity |
isKev, kevDateAdded, kevDueDate, daysUntilDue, overdue | KEV status and BOD 22-01 due date |
requiredAction, knownRansomware, knownRansomwareCampaignUse, kevNotes | What to do; ransomware use |
cwe[] | CWEs listed by CISA |
kevCatalogVersion, kevCatalogReleased, source, sourceUrl, checkedAt | Provenance |
Inputs
addedSince, ransomwareOnly, vendors[], products[], cveIds[], keyword, cweId, maxItems (default 10, max 2,000). Each run reads the current CISA KEV JSON catalog in one request.
Cheap first run
{"maxItems": 5} costs $0.0046 (5 × $0.0009 + $0.0001). 1,000 CVEs cost $0.90.
Source and licence
CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/known-exploited-vulnerabilities-catalog), CC0 1.0. Not endorsed by CISA or DHS.
Made by Johto Data.
