Check CVEs against CISA's Known Exploited Vulnerabilities catalog or search it b...

{ "method": "GET", "queryParams": { "days": 30, "limit": 3 }, "type": "http" }

{ "example": { "catalog_size": 1756, "catalog_version": "2026.10.23", "in_catalog": null, "matches": 30, "source": "CISA Known Exploited Vulnerabilities catalog (CC0)", "vulnerabilities": [ { "added": "2026-10-23", "cve": "CVE-2026-114625", "cwes": [ "CWE-89" ], "description": "Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data mana...", "due": "2026-10-26", "name": "Arista VeloCloud Orchestrator SQL Injection Vulnerability", "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-114625", "product": "VeloCloud Orchestrator", "ransomware_use": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon...", "vendor": "Arista" }, { "added": "2026-10-23", "cve": "CVE-2026-110447", "cwes": [ "CWE-78" ], "description": "Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.", "due": "2026-10-26", "name": "Collabora Online – Built-in CODE Server OS Command Injection Vulnerability", "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-110447", "product": "Collabora Online – Built-in CODE Server", "ransomware_use": "Unknown", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon...", "vendor": "Collabora" } ] }, "type": "json" }