Skip to content
oanor
Sign up free
Marketplace Pricing Features Sign in
GET /v1/kev

Browse the CISA KEV catalog

Try it live

10 free calls per day — no sign-up, no API key. Goes through the oanor gateway.

Custom headers (optional)
api.oanor.com/vulnintel-api

It works. Grab an API key and use it in your project.

Get an API key

Code snippets

curl "https://api.oanor.com/vulnintel-api/v1/kev" \
  -H "x-oanor-key: oanor_test_..."
await fetch("https://api.oanor.com/vulnintel-api/v1/kev", {
  headers: { "x-oanor-key": "oanor_test_..." }
});
$ch = curl_init("https://api.oanor.com/vulnintel-api/v1/kev");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);
import requests
requests.get(
    "https://api.oanor.com/vulnintel-api/v1/kev",
    headers={"x-oanor-key": "oanor_test_..."}
)

Example response

A real response from this endpoint, captured by the latest health check.

{
    "data": {
        "count": 20,
        "limit": 20,
        "total": 1608,
        "offset": 0,
        "catalog_version": "2026.06.01",
        "vulnerabilities": [
            {
                "cve": "CVE-2024-21182",
                "name": "Oracle WebLogic Server Unspecified Vulnerability",
                "vendor": "Oracle",
                "product": "WebLogic Server",
                "due_date": "2026-06-04",
                "date_added": "2026-06-01",
                "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
                "known_ransomware": false
            },
            {
                "cve": "CVE-2026-0257",
                "name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability",
                "vendor": "Palo Alto Networks",
                "product": "PAN-OS",
                "due_date": "2026-06-01",
                "date_added": "2026-05-29",
                "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
                "known_ransomware": false
            },
            {
                "cve": "CVE-2026-48027",
                "name": "Nx Console Embedded Malicious Code Vulnerability",
                "vendor": "Nx",
                "product": "Nx Console",
                "due_date": "2026-06-10",
                "date_added": "2026-05-27",
                "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
                "known_ransomware": true
            },
            {
                "cve": "CVE-2026-45321",
                "name": "TanStack Unspecified Vulnerability",
                "vendor": "TanStack",
                "product": "TanStack",
                "due_date": "2026-06-10",
                "date_added": "2026-05-27",
                "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
                "known_ransomware": true
            },
            {
                "cve": "CVE-2026-8398",
                "name": "Daemon Tools Lite Embedded Malicious Code Vulnerability",
                "vendor": "Daemon",
                "product": "Daemon Tools Lite",
                "due_date": "2026-05-30",
                "date_added": "2026-05-27",
                "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
                "known_ransomware": false
            },
            {
                "cve"
…