# Latest Added GET /explore/vulnerability-insight/latest-added-vulnerabilities-list: Lists the latest added CVEs. Source: https://docs.deepinfo.com/reference/vulnerability/latest-added/ Last updated: 2026-09-27 --- `GET https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list` Lists the latest added CVEs. Optional filters: - `vendor` - `product` - `version` - `severity` ## Authentication Send your API key in the `apikey` request header. ## Query Parameters | Parameter | Required | Description | Example | |---|---|---|---| | `size` | Optional | Min `1`, max `100`. Default `10`. | `5` | | `vendor` | Optional | | | | `product` | Optional | | | | `version` | Optional | | | | `version__startswith` | Optional | | | | `severity` | Optional | | | ## Response Fields An array of objects: | Field | Type | Description | |---|---|---| | `id` | string | | | `source_identifier` | string | | | `published` | string | date-time | | `last_modified` | string | date-time | | `status` | string | | | `evaluator_comment` | string | | | `evaluator_solution` | string | | | `evaluator_impact` | string | | | `cisa_exploit_add` | string | date | | `cisa_action_due` | string | date | | `cisa_required_action` | string | | | `cisa_vulnerability_name` | string | | | `descriptions` | array of object | | | `references` | array of object | | | `metrics` | object | | | `weaknesses` | array of object | | | `configurations` | array of object | | | `vendor_comments` | array of object | | | `enrichment` | object | | ## Response Schema _Inferred from examples._ Built from the saved 2xx example response: the fields it contains, with the types seen there. It is not a contract. The response body is an array; `[]` marks its elements. | Field | Type | |---|---| | `[].id` | string | | `[].source_identifier` | string | | `[].published` | string | | `[].last_modified` | string | | `[].status` | string | | `[].evaluator_comment` | null | | `[].evaluator_solution` | null | | `[].evaluator_impact` | null | | `[].cisa_exploit_add` | null | | `[].cisa_action_due` | null | | `[].cisa_required_action` | null | | `[].cisa_vulnerability_name` | null | | `[].descriptions` | array | | `[].descriptions[].lang` | string | | `[].descriptions[].value` | string | | `[].references` | array | | `[].references[].url` | string | | `[].references[].source` | string | | `[].references[].tags` | null | | `[].metrics` | object | | `[].metrics.cvss_metric_v40` | array | | `[].metrics.cvss_metric_v40[].source` | string | | `[].metrics.cvss_metric_v40[].type` | string | | `[].metrics.cvss_metric_v40[].cvss_data` | object | | `[].metrics.cvss_metric_v40[].cvss_data.version` | string | | `[].metrics.cvss_metric_v40[].cvss_data.vector_string` | string | | `[].metrics.cvss_metric_v40[].cvss_data.attack_vector` | string | | `[].metrics.cvss_metric_v40[].cvss_data.attack_complexity` | string | | `[].metrics.cvss_metric_v40[].cvss_data.attack_requirements` | string | | `[].metrics.cvss_metric_v40[].cvss_data.privileges_required` | string | | `[].metrics.cvss_metric_v40[].cvss_data.user_interaction` | string | | `[].metrics.cvss_metric_v40[].cvss_data.vulnerable_system_confidentiality` | null | | `[].metrics.cvss_metric_v40[].cvss_data.vulnerable_system_integrity` | null | | `[].metrics.cvss_metric_v40[].cvss_data.vulnerable_system_availability` | null | | `[].metrics.cvss_metric_v40[].cvss_data.subsequent_system_confidentiality` | null | | `[].metrics.cvss_metric_v40[].cvss_data.subsequent_system_integrity` | null | | `[].metrics.cvss_metric_v40[].cvss_data.subsequent_system_availability` | null | | `[].metrics.cvss_metric_v40[].cvss_data.exploit_maturity` | string | | `[].metrics.cvss_metric_v40[].cvss_data.confidentiality_requirements` | null | | `[].metrics.cvss_metric_v40[].cvss_data.integrity_requirements` | null | | `[].metrics.cvss_metric_v40[].cvss_data.availability_requirements` | null | | `[].metrics.cvss_metric_v40[].cvss_data.modified_attack_vector` | string | | `[].metrics.cvss_metric_v40[].cvss_data.modified_attack_complexity` | string | | `[].metrics.cvss_metric_v40[].cvss_data.modified_attack_requirements` | string | | `[].metrics.cvss_metric_v40[].cvss_data.modified_privileges_required` | string | | `[].metrics.cvss_metric_v40[].cvss_data.modified_user_interaction` | string | | `[].metrics.cvss_metric_v40[].cvss_data.modified_vulnerable_system_confidentiality` | null | | `[].metrics.cvss_metric_v40[].cvss_data.modified_vulnerable_system_integrity` | null | | `[].metrics.cvss_metric_v40[].cvss_data.modified_vulnerable_system_availability` | null | | `[].metrics.cvss_metric_v40[].cvss_data.modified_subsequent_system_confidentiality` | null | | `[].metrics.cvss_metric_v40[].cvss_data.modified_subsequent_system_integrity` | null | | `[].metrics.cvss_metric_v40[].cvss_data.modified_subsequent_system_availability` | null | | `[].metrics.cvss_metric_v40[].cvss_data.safety` | null | | `[].metrics.cvss_metric_v40[].cvss_data.automatable` | null | | `[].metrics.cvss_metric_v40[].cvss_data.recovery` | null | | `[].metrics.cvss_metric_v40[].cvss_data.value_density` | string | | `[].metrics.cvss_metric_v40[].cvss_data.vulnerability_response_effort` | string | | `[].metrics.cvss_metric_v40[].cvss_data.provider_urgency` | string | | `[].metrics.cvss_metric_v40[].cvss_data.base_score` | number | | `[].metrics.cvss_metric_v40[].cvss_data.base_severity` | string | | `[].metrics.cvss_metric_v31` | null | | `[].metrics.cvss_metric_v30` | null | | `[].metrics.cvss_metric_v2` | null | | `[].weaknesses` | array | | `[].weaknesses[].source` | string | | `[].weaknesses[].type` | string | | `[].weaknesses[].description` | array | | `[].weaknesses[].description[].lang` | string | | `[].weaknesses[].description[].value` | string | | `[].configurations` | null | | `[].vendor_comments` | null | | `[].enrichment` | object | | `[].enrichment.cpe` | null | | `[].enrichment.cwe` | array | | `[].enrichment.cwe[].id` | number | | `[].enrichment.cwe[].owasptop10_2021` | string | | `[].enrichment.cwe[].name` | string | | `[].enrichment.cwe[].description` | string | | `[].enrichment.cwe[].capec_id` | array | | `[].enrichment.cwe[].scope` | array | | `[].enrichment.cwe[].impact` | array | | `[].enrichment.cwe[].detection_method` | array | | `[].enrichment.epss_score` | null | | `[].enrichment.cisa_kev` | null | | `[].enrichment.vdeep_metric` | object | | `[].enrichment.vdeep_metric.available_versions` | array | | `[].enrichment.vdeep_metric.source` | string | | `[].enrichment.vdeep_metric.type` | string | | `[].enrichment.vdeep_metric.cvss_data` | object | | `[].enrichment.vdeep_metric.cvss_data.version` | string | | `[].enrichment.vdeep_metric.cvss_data.vector_string` | string | | `[].enrichment.vdeep_metric.cvss_data.attack_vector` | string | | `[].enrichment.vdeep_metric.cvss_data.attack_complexity` | string | | `[].enrichment.vdeep_metric.cvss_data.attack_requirements` | string | | `[].enrichment.vdeep_metric.cvss_data.privileges_required` | string | | `[].enrichment.vdeep_metric.cvss_data.user_interaction` | string | | `[].enrichment.vdeep_metric.cvss_data.vulnerable_system_confidentiality` | null | | `[].enrichment.vdeep_metric.cvss_data.vulnerable_system_integrity` | null | | `[].enrichment.vdeep_metric.cvss_data.vulnerable_system_availability` | null | | `[].enrichment.vdeep_metric.cvss_data.subsequent_system_confidentiality` | null | | `[].enrichment.vdeep_metric.cvss_data.subsequent_system_integrity` | null | | `[].enrichment.vdeep_metric.cvss_data.subsequent_system_availability` | null | | `[].enrichment.vdeep_metric.cvss_data.exploit_maturity` | string | | `[].enrichment.vdeep_metric.cvss_data.confidentiality_requirements` | null | | `[].enrichment.vdeep_metric.cvss_data.integrity_requirements` | null | | `[].enrichment.vdeep_metric.cvss_data.availability_requirements` | null | | `[].enrichment.vdeep_metric.cvss_data.modified_attack_vector` | string | | `[].enrichment.vdeep_metric.cvss_data.modified_attack_complexity` | string | | `[].enrichment.vdeep_metric.cvss_data.modified_attack_requirements` | string | | `[].enrichment.vdeep_metric.cvss_data.modified_privileges_required` | string | | `[].enrichment.vdeep_metric.cvss_data.modified_user_interaction` | string | | `[].enrichment.vdeep_metric.cvss_data.modified_vulnerable_system_confidentiality` | null | | `[].enrichment.vdeep_metric.cvss_data.modified_vulnerable_system_integrity` | null | | `[].enrichment.vdeep_metric.cvss_data.modified_vulnerable_system_availability` | null | | `[].enrichment.vdeep_metric.cvss_data.modified_subsequent_system_confidentiality` | null | | `[].enrichment.vdeep_metric.cvss_data.modified_subsequent_system_integrity` | null | | `[].enrichment.vdeep_metric.cvss_data.modified_subsequent_system_availability` | null | | `[].enrichment.vdeep_metric.cvss_data.safety` | null | | `[].enrichment.vdeep_metric.cvss_data.automatable` | null | | `[].enrichment.vdeep_metric.cvss_data.recovery` | null | | `[].enrichment.vdeep_metric.cvss_data.value_density` | string | | `[].enrichment.vdeep_metric.cvss_data.vulnerability_response_effort` | string | | `[].enrichment.vdeep_metric.cvss_data.provider_urgency` | string | | `[].enrichment.vdeep_metric.cvss_data.base_score` | number | | `[].enrichment.vdeep_metric.cvss_data.base_severity` | string | ## Examples ### 200 · OK ```bash curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=5' \ -H 'apikey: YOUR_API_KEY' \ -H 'Accept: application/json' ``` `Content-Type: application/json` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a` ```json [ { "id": "CVE-2026-95754", "source_identifier": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "published": "2026-09-22T15:17:28Z", "last_modified": "2026-09-22T15:17:28Z", "status": "Deferred", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "In MISP's UsersController login() method, the pre-authentication database query used for the TOTP (two-factor authentication) verification branch did not include the User.disabled column in its SELECT fields list. The query selected only User.password, User.totp, and User.hotp_counter. When the TOTP branch subsequently accessed $unauth_user['User']['disabled'], the key was absent from the result set, producing a PHP 'Undefined array key' warning and causing the expression to evaluate as null (falsy). As a result, the disabled-user guard in the TOTP branch was effectively a no-op: a disabled, TOTP-enrolled user could proceed to the TOTP verification step rather than being rejected at that point. \n\nThe commit message explicitly states this was 'harmless in practice' because the subsequent identify() call re-validates the user and would still reject a disabled account. \n\n…" } ], "references": [ { "url": "https://github.com/MISP/MISP/commit/3df982ab1", "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "tags": null } ], "metrics": { "cvss_metric_v40": [ { "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "type": "Secondary", "cvss_data": { "version": "4.0", "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": "NONE", "privileges_required": "NONE", "user_interaction": "NONE", "vulnerable_system_confidentiality": null, "vulnerable_system_integrity": null, "vulnerable_system_availability": null, "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": "NOT_DEFINED", "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": "NOT_DEFINED", "modified_attack_complexity": "NOT_DEFINED", "modified_attack_requirements": "NOT_DEFINED", "modified_privileges_required": "NOT_DEFINED", "modified_user_interaction": "NOT_DEFINED", "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": "NOT_DEFINED", "vulnerability_response_effort": "NOT_DEFINED", "provider_urgency": "NOT_DEFINED", "base_score": 6.9, "base_severity": "MEDIUM" } } ], "cvss_metric_v31": null, "cvss_metric_v30": null, "cvss_metric_v2": null }, "weaknesses": [ { "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-285" } ] } ], "configurations": null, "vendor_comments": null, "enrichment": { "cpe": null, "cwe": [ { "id": 285, "owasptop10_2021": "A01 Broken Access Control", "name": "Improper Authorization", "description": "The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.", "capec_id": [ 1, 5 ], "scope": [ "Access Control", "Confidentiality" ], "impact": [ "Execute Unauthorized Code or Commands", "Gain Privileges or Assume Identity" ], "detection_method": [ "Architecture or Design Review", "Automated Dynamic Analysis" ] } ], "epss_score": null, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "4.0" ], "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "type": "Secondary", "cvss_data": { "version": "4.0", "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": "NONE", "privileges_required": "NONE", "user_interaction": "NONE", "vulnerable_system_confidentiality": null, "vulnerable_system_integrity": null, "vulnerable_system_availability": null, "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": "NOT_DEFINED", "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": "NOT_DEFINED", "modified_attack_complexity": "NOT_DEFINED", "modified_attack_requirements": "NOT_DEFINED", "modified_privileges_required": "NOT_DEFINED", "modified_user_interaction": "NOT_DEFINED", "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": "NOT_DEFINED", "vulnerability_response_effort": "NOT_DEFINED", "provider_urgency": "NOT_DEFINED", "base_score": 6.9, "base_severity": "MEDIUM" } } } }, { "id": "CVE-2026-95703", "source_identifier": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "published": "2026-09-22T15:17:28Z", "last_modified": "2026-09-22T15:17:28Z", "status": "Deferred", "evaluator_comment": null, "evaluator_solution": null, "evaluator_impact": null, "cisa_exploit_add": null, "cisa_action_due": null, "cisa_required_action": null, "cisa_vulnerability_name": null, "descriptions": [ { "lang": "en", "value": "In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem probes (file_exists, MIME type detection, EXIF reading) before verifying that the value corresponded to a genuine PHP file upload via is_uploaded_file. An authenticated site-admin user could supply an arbitrary server file path as the tmp_name parameter. The application would then probe that path and return distinct validation error messages depending on whether the file existed and what its image type was, effectively creating a file-existence and image-type oracle against the server filesystem.\n\nThe vulnerability requires site-admin privileges and does not allow arbitrary file read, code execution, or modification; the impact is limited to disclosure of whether a given path exists on the server and, for image files, their type." } ], "references": [ { "url": "https://github.com/MISP/MISP/commit/12eaadc9e", "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "tags": null } ], "metrics": { "cvss_metric_v40": [ { "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "type": "Secondary", "cvss_data": { "version": "4.0", "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": "NONE", "privileges_required": "HIGH", "user_interaction": "NONE", "vulnerable_system_confidentiality": null, "vulnerable_system_integrity": null, "vulnerable_system_availability": null, "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": "NOT_DEFINED", "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": "NOT_DEFINED", "modified_attack_complexity": "NOT_DEFINED", "modified_attack_requirements": "NOT_DEFINED", "modified_privileges_required": "NOT_DEFINED", "modified_user_interaction": "NOT_DEFINED", "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": "NOT_DEFINED", "vulnerability_response_effort": "NOT_DEFINED", "provider_urgency": "NOT_DEFINED", "base_score": 5.1, "base_severity": "MEDIUM" } } ], "cvss_metric_v31": null, "cvss_metric_v30": null, "cvss_metric_v2": null }, "weaknesses": [ { "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-20" }, { "lang": "en", "value": "CWE-200" } ] } ], "configurations": null, "vendor_comments": null, "enrichment": { "cpe": null, "cwe": [ { "id": 200, "owasptop10_2021": "A01 Broken Access Control", "name": "Exposure of Sensitive Information to an Unauthorized Actor", "description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.", "capec_id": [ 13, 22 ], "scope": [ "Confidentiality" ], "impact": [ "Read Application Data" ], "detection_method": [ "Architecture or Design Review", "Automated Static Analysis - Binary or Bytecode" ] }, { "id": 20, "owasptop10_2021": "A03 Injection", "name": "Improper Input Validation", "description": "The product receives input or data, but it does\n not validate or incorrectly validates that the input has the\n properties that are required to process the data safely and\n correctly.", "capec_id": [ 3, 7 ], "scope": [ "Availability", "Confidentiality" ], "impact": [ "DoS: Crash, Exit, or Restart", "DoS: Resource Consumption (CPU)" ], "detection_method": [ "Architecture or Design Review", "Automated Static Analysis" ] } ], "epss_score": null, "cisa_kev": null, "vdeep_metric": { "available_versions": [ "4.0" ], "source": "5a6e4751-2f3f-4070-9419-94fb35b644e8", "type": "Secondary", "cvss_data": { "version": "4.0", "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "attack_vector": "NETWORK", "attack_complexity": "LOW", "attack_requirements": "NONE", "privileges_required": "HIGH", "user_interaction": "NONE", "vulnerable_system_confidentiality": null, "vulnerable_system_integrity": null, "vulnerable_system_availability": null, "subsequent_system_confidentiality": null, "subsequent_system_integrity": null, "subsequent_system_availability": null, "exploit_maturity": "NOT_DEFINED", "confidentiality_requirements": null, "integrity_requirements": null, "availability_requirements": null, "modified_attack_vector": "NOT_DEFINED", "modified_attack_complexity": "NOT_DEFINED", "modified_attack_requirements": "NOT_DEFINED", "modified_privileges_required": "NOT_DEFINED", "modified_user_interaction": "NOT_DEFINED", "modified_vulnerable_system_confidentiality": null, "modified_vulnerable_system_integrity": null, "modified_vulnerable_system_availability": null, "modified_subsequent_system_confidentiality": null, "modified_subsequent_system_integrity": null, "modified_subsequent_system_availability": null, "safety": null, "automatable": null, "recovery": null, "value_density": "NOT_DEFINED", "vulnerability_response_effort": "NOT_DEFINED", "provider_urgency": "NOT_DEFINED", "base_score": 5.1, "base_severity": "MEDIUM" } } } } ] ``` ### 400 · Invalid Parameter (invalid size=abc) ```bash curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?size=abc' \ -H 'apikey: YOUR_API_KEY' \ -H 'Accept: application/json' ``` `Content-Type: application/json` · `deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a` ```json { "code": 10400, "parameters": [ { "param": "size", "details": [ "A valid integer is required." ] } ], "solution": "https://docs.deepinfo.com/reference/" } ``` ## Worked Examples Worked examples of this endpoint, each on its own page with the exact request and its response: [Latest Added Vulnerabilities Examples](/reference/vulnerability/latest-added/examples/). - [Newest Microsoft CVEs](/reference/vulnerability/latest-added/examples/vendor-microsoft/): The newest CVEs that list a Microsoft product, including as the platform of another vendor's product. - [Newest Critical CVEs](/reference/vulnerability/latest-added/examples/severity-critical/): The newest CVEs whose Deepinfo severity is CRITICAL.