API Reference

List Recent CISA KEV Additions

Return CISA Known Exploited Vulnerabilities catalog entries added within the last N days, so you can track recently disclosed exploited vulnerabilities.

GET

/v1/cve/kev-recent

Cost: 1 credit per successful call

Query parameters

daysintegeroptionaldefault: 30

Look-back window in days. Accepted range: 1–365.

limitintegeroptionaldefault: 50

Maximum number of entries to return. Accepted range: 1–200.

Request

curl "https://api.precursorintelligence.com/functions/v1/cve/kev-recent?days=14&limit=100" \
  -H "Authorization: Bearer $PRECURSOR_API_KEY"

Response

200 OK

{
  "data": {
    "count": 3,
    "days": 14,
    "limit": 100,
    "items": [
      {
        "cve_id": "CVE-2024-3094",
        "vendor": "XZ Utils",
        "product": "xz-utils",
        "vulnerability_name": "XZ Utils Supply Chain Compromise",
        "date_added": "2026-05-16",
        "due_date": "2026-06-06",
        "required_action": "Apply mitigations per vendor instructions or discontinue use if mitigations are unavailable.",
        "short_description": "XZ Utils contains a supply chain compromise vulnerability affecting liblzma."
      },
      {
        "cve_id": "CVE-2024-21762",
        "vendor": "Fortinet",
        "product": "FortiOS",
        "vulnerability_name": "Fortinet FortiOS Out-of-Bound Write Vulnerability",
        "date_added": "2026-05-14",
        "due_date": "2026-06-04",
        "required_action": "Apply mitigations per vendor instructions or discontinue use if mitigations are unavailable.",
        "short_description": "Fortinet FortiOS contains an out-of-bounds write vulnerability that allows a remote unauthenticated attacker to execute arbitrary code."
      }
    ],
    "generated_at": "2026-05-29T08:15:00.000Z"
  },
  "meta": {
    "request_id": "8b16efb8-9a6c-4ace-b817-11cbee626d08",
    "generated_at": "2026-05-18T10:24:31.118Z",
    "credits": { "charged": 1, "remaining": 9998 }
  }
}

Response fields

data.countintegeroptional

Number of entries returned (equals items.length).

data.daysintegeroptional

The look-back window used for this request, in days.

data.limitintegeroptional

The maximum number of entries requested.

data.itemsarrayoptional

KEV entries added within the window. Each object contains the fields below.

data.items[].cve_idstringoptional

CVE identifier for the vulnerability.

data.items[].vendorstringoptional

Vendor or project name as recorded in the CISA KEV catalog.

data.items[].productstringoptional

Affected product name.

data.items[].vulnerability_namestringoptional

Human-readable vulnerability name from the KEV catalog.

data.items[].date_addedstringoptional

ISO 8601 date the entry was added to the KEV catalog (e.g. 2026-05-16).

data.items[].due_datestringoptional

Federal agency remediation due date from CISA.

data.items[].required_actionstringoptional

Remediation action prescribed by CISA.

data.items[].short_descriptionstringoptional

Brief description of the vulnerability.

data.generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

Status	`error`	When
400	`invalid_days`, `invalid_limit`	A parameter failed validation.
401	`invalid_authorization`	Missing or malformed `Authorization` header.
401	`unauthorized`	Invalid/revoked key, or IP not allowlisted.
402	`insufficient_credits`	Organisation credit balance is below 1.
404	`not_found`	The route or entity does not exist.
405	`method_not_allowed`	Only `GET` and `OPTIONS` are accepted.
500	`internal`	Unexpected server error (credit auto-refunded).

See Errors for the full error reference.