Roster Data · Dataset
CISA Known Exploited Vulnerabilities (KEV) catalog
The full CISA KEV catalog: every CVE known to be exploited in the wild, with vendor, product, date added, remediation due date, ransomware use and required action. The list security teams prioritise patching against. Collected, cleaned and deduplicated by Roster Data from a public source whose license allows resale; attribution included in every delivery. You only pay when data is delivered.
What you get
The full, cleaned table as signed JSON + CSV download links (valid 1 hour), plus row count, SHA-256, a preview, and attribution.
Full table · JSON + CSV download
- Price
- 0.01 USDC
- Freshness
- Updated 7 h ago
- Refresh
- every 6 hours
- Rows
- 1,734 · 1003 KB
Source & license
- CISA Known Exploited Vulnerabilities Catalog · CC0-1.0
Source: CISA Known Exploited Vulnerabilities Catalog (CC0).
Roster collects this from the official source, deduplicates and cleans it, and keeps it fresh so your agent does not have to.
Sample
| cve_id | vendor | product | name | date_added | due_date | known_ransomware | required_action |
|---|---|---|---|---|---|---|---|
| CVE-2026-88779 | Citrix | NetScaler | Citrix NetScaler Improper Restriction of Operat… | 2026-10-04 | 2026-10-07 | Unknown | Apply mitigations in accordance with vendor ins… |
| CVE-2026-102489 | Zammad GmbH | Zammad | Zammad GmbH Zammad Session Fixation Vulnerabili… | 2026-10-02 | 2026-10-05 | Unknown | Apply mitigations in accordance with vendor ins… |
| CVE-2026-102490 | Zammad GmbH | Zammad | Zammad GmbH Zammad Improper Privilege Managemen… | 2026-10-02 | 2026-10-05 | Unknown | Apply mitigations in accordance with vendor ins… |
| CVE-2026-104286 | Fortinet | FortiMail | Fortinet FortiMail Path Traversal Vulnerability | 2026-10-01 | 2026-10-04 | Unknown | Apply mitigations in accordance with vendor ins… |
| CVE-2026-76504 | Cisco | Catalyst SD-WAN Manager | Cisco Catalyst SD-WAN Manager Hex Encoding Vuln… | 2026-09-30 | 2026-10-03 | Unknown | Apply mitigations in accordance with vendor ins… |
Schema
| cve_id | string | CVE id. |
| vendor | string | Vendor/project. |
| product | string | Product. |
| name | string | Vulnerability name. |
| date_added | date | Added to KEV. |
| due_date | date | Federal remediation due date. |
| known_ransomware | string | Known / Unknown ransomware campaign use. |
| required_action | string | Required action. |
| cwes | string | CWE ids. |
| description | string | Short description. |
Buy from code
curl -X POST https://roster.network/roster-api/v1/need/buy \
-H "Authorization: Bearer $ROSTER_API_KEY" -H "content-type: application/json" \
-d '{"listingId":"cap_42a1162f1381086d","input":{}}'
// SDK
const { matches } = await roster.need("CISA Known Exploited Vulnerabilities (KEV) catalog");
const bought = await roster.buy({ listingId: "cap_42a1162f1381086d" });