Layer 1 — open, no key

Actively exploited CVEs, ranked patch-first.

CISA KEV entries ranked by CVSS × EPSS exploitation probability × known ransomware use, with CISA due date and patch status. Open upstreams only (KEV public domain, FIRST EPSS, NIST NVD). Deterministic: no model in the loop.

Returns: vulnerabilities[] {cve, title, score, tier, factors, due_date, patched, url}

get/api/vulnerabilities/exploited

Request

  • Base URL: https://outage.me
  • URL: https://outage.me/api/vulnerabilities/exploited
  • Auth: none declared

Response

OK

as_ofstring date required

Snapshot date (UTC).

sourcestring required

Where the facts come from.

licensestring required

Terms of reuse (attribution).

countinteger required

Rows in this response.

Changes

No recorded changes to this operation across all 1 revision of this API.