List exploited vulnerabilities

curl -G https://api.softon.dev/v1/cyber/kev \
  -H "Authorization: Bearer $SOFTON_KEY" \
  -d catalog_version=2026.09.18 -d date=2026-08-12 -d cve=CVE-2002-0367

req, _ := http.NewRequestWithContext(ctx, "GET",
    "https://api.softon.dev/v1/cyber/kev", nil)
req.Header.Set("Authorization", "Bearer "+os.Getenv("SOFTON_KEY"))

q := req.URL.Query()
q.Set("catalog_version", "2026.09.18")
q.Set("date", "2026-08-12")
q.Set("cve", "CVE-2002-0367")
req.URL.RawQuery = q.Encode()

res, err := http.DefaultClient.Do(req)
if err != nil { log.Fatal(err) }
defer res.Body.Close()

var page struct {
    Data []Kev `json:"data"`
    Meta struct{ Next *string `json:"next"` } `json:"meta"`
}
if err := json.NewDecoder(res.Body).Decode(&page); err != nil { log.Fatal(err) }
// page.Meta.Next → send it back as ?cursor= for the following page

import json, os, urllib.parse, urllib.request

url = "https://api.softon.dev/v1/cyber/kev" + "?" + urllib.parse.urlencode({
    "catalog_version": "2026.09.18",
    "date": "2026-08-12",
    "cve": "CVE-2002-0367",
})
req = urllib.request.Request(url, headers={
    "Authorization": "Bearer " + os.environ["SOFTON_KEY"],
})
page = json.load(urllib.request.urlopen(req))
# page["meta"]["next"] → send it back as ?cursor= for the following page

const url = new URL("https://api.softon.dev/v1/cyber/kev");
url.searchParams.set("catalog_version", "2026.09.18");
url.searchParams.set("date", "2026-08-12");
url.searchParams.set("cve", "CVE-2002-0367");

const res = await fetch(url, {
  headers: { Authorization: `Bearer ${process.env.SOFTON_KEY}` },
});
if (!res.ok) throw new Error(`${res.status} ${await res.text()}`);
const { data, meta } = await res.json();
// meta.next → send it back as ?cursor= for the following page

{
  "data": [
    {
      "id": "cisa_kev:2026.09.18:CVE-2026-59310",
      "source": "cisa_kev",
      "catalog_version": "2026.09.18",
      "date_released": "2026-09-18T19:00:05.097400Z",
      "catalog_count": 1716,
      "cve_id": "CVE-2026-59310",
      "vendor_project": "Broadcom",
      "product": "VMware vCenter",
      "vulnerability_name": "Broadcom VMware vCenter Path Traversal Vulnerability",
      "date_added": "2026-08-18",
      "due_date": "2026-08-21",
      "short_description": "Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access to vCenter to execute arbitrary code.",
      "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
      "known_ransomware_campaign_use": "Known",
      "forensic_triage": "Yes",
      "notes": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-59310",
      "cwes": [
        "CWE-22"
      ],
      "ingested_at": "2026-09-19T02:00:11.884215Z"
    }
  ],
  "meta": { "count": 1, "next": "eyJvIjoyfQ", "request_id": "req_9Fv3" },
  "error": null
}