Latest Added Vulnerabilities Examples · Example 1 of 2 in Size

The Ten Newest CVEs

GEThttps://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list

Without parameters, the ten newest CVEs, newest first.

Param: size

Without parameters the list has the API's default size, 10 CVEs, newest first by published.

What to Notice

The newest CVEs are still Received: enrichment.cpe and enrichment.epss_score are null because the NVD has not analysed them and EPSS has not scored them yet.

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list"

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Shortened for this page: items: 3 of 10 shown

Response Body

[
  {
    "id": "CVE-2026-87739",
    "source_identifier": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
    "published": "2026-09-24T07:16:34Z",
    "last_modified": "2026-09-24T07:16:34Z",
    "status": "Received",
    "evaluator_comment": null,
    "evaluator_solution": null,
    "evaluator_impact": null,
    "cisa_exploit_add": null,
    "cisa_action_due": null,
    "cisa_required_action": null,
    "cisa_vulnerability_name": null,
    "descriptions": [
      {
        "lang": "en",
        "value": "An improper authentication vulnerability in PaperCut MF/NG allows an unauthenticated, remote attacker to trigger report generation. By submitting report generation requests without valid credentials, an attacker can generate reports and gain unauthorized access to sensitive information."
      }
    ],
    "references": [
      {
        "url": "https://www.papercut.com/kb/Main/security-bulletin-sep-2026/",
        "source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
        "tags": null
      }
    ],
    "metrics": {
      "cvss_metric_v40": [
        {
          "source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
          "type": "Secondary",
          "cvss_data": {
            "version": "4.0",
            "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "attack_requirements": "NONE",
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "vulnerable_system_confidentiality": null,
            "vulnerable_system_integrity": null,
            "vulnerable_system_availability": null,
            "subsequent_system_confidentiality": null,
            "subsequent_system_integrity": null,
            "subsequent_system_availability": null,
            "exploit_maturity": "NOT_DEFINED",
            "confidentiality_requirements": null,
            "integrity_requirements": null,
            "availability_requirements": null,
            "modified_attack_vector": "NOT_DEFINED",
            "modified_attack_complexity": "NOT_DEFINED",
            "modified_attack_requirements": "NOT_DEFINED",
            "modified_privileges_required": "NOT_DEFINED",
            "modified_user_interaction": "NOT_DEFINED",
            "modified_vulnerable_system_confidentiality": null,
            "modified_vulnerable_system_integrity": null,
            "modified_vulnerable_system_availability": null,
            "modified_subsequent_system_confidentiality": null,
            "modified_subsequent_system_integrity": null,
            "modified_subsequent_system_availability": null,
            "safety": null,
            "automatable": null,
            "recovery": null,
            "value_density": "NOT_DEFINED",
            "vulnerability_response_effort": "NOT_DEFINED",
            "provider_urgency": "NOT_DEFINED",
            "base_score": 6.9,
            "base_severity": "MEDIUM"
          }
        }
      ],
      "cvss_metric_v31": null,
      "cvss_metric_v30": null,
      "cvss_metric_v2": null
    },
    "weaknesses": [
      {
        "source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
        "type": "Secondary",
        "description": [
          {
            "lang": "en",
            "value": "CWE-639"
          }
        ]
      }
    ],
    "configurations": null,
    "vendor_comments": null,
    "enrichment": {
      "cpe": null,
      "cwe": [
        {
          "id": 639,
          "owasptop10_2021": "A01 Broken Access Control",
          "name": "Authorization Bypass Through User-Controlled Key",
          "description": "The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.",
          "capec_id": null,
          "scope": [
            "Access Control"
          ],
          "impact": [
            "Bypass Protection Mechanism",
            "Gain Privileges or Assume Identity"
          ],
          "detection_method": [
            "Automated Static Analysis"
          ]
        }
      ],
      "epss_score": null,
      "cisa_kev": null,
      "vdeep_metric": {
        "available_versions": [
          "4.0"
        ],
        "source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
        "type": "Secondary",
        "cvss_data": {
          "version": "4.0",
          "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X",
          "attack_vector": "NETWORK",
          "attack_complexity": "LOW",
          "attack_requirements": "NONE",
          "privileges_required": "NONE",
          "user_interaction": "NONE",
          "vulnerable_system_confidentiality": null,
          "vulnerable_system_integrity": null,
          "vulnerable_system_availability": null,
          "subsequent_system_confidentiality": null,
          "subsequent_system_integrity": null,
          "subsequent_system_availability": null,
          "exploit_maturity": "NOT_DEFINED",
          "confidentiality_requirements": null,
          "integrity_requirements": null,
          "availability_requirements": null,
          "modified_attack_vector": "NOT_DEFINED",
          "modified_attack_complexity": "NOT_DEFINED",
          "modified_attack_requirements": "NOT_DEFINED",
          "modified_privileges_required": "NOT_DEFINED",
          "modified_user_interaction": "NOT_DEFINED",
          "modified_vulnerable_system_confidentiality": null,
          "modified_vulnerable_system_integrity": null,
          "modified_vulnerable_system_availability": null,
          "modified_subsequent_system_confidentiality": null,
          "modified_subsequent_system_integrity": null,
          "modified_subsequent_system_availability": null,
          "safety": null,
          "automatable": null,
          "recovery": null,
          "value_density": "NOT_DEFINED",
          "vulnerability_response_effort": "NOT_DEFINED",
          "provider_urgency": "NOT_DEFINED",
          "base_score": 6.9,
          "base_severity": "MEDIUM"
        }
      }
    }
  },
  {
    "id": "CVE-2026-82077",
    "source_identifier": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
    "published": "2026-09-24T07:16:33Z",
    "last_modified": "2026-09-24T07:16:33Z",
    "status": "Received",
    "evaluator_comment": null,
    "evaluator_solution": null,
    "evaluator_impact": null,
    "cisa_exploit_add": null,
    "cisa_action_due": null,
    "cisa_required_action": null,
    "cisa_vulnerability_name": null,
    "descriptions": [
      {
        "lang": "en",
        "value": "An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings."
      }
    ],
    "references": [
      {
        "url": "https://www.papercut.com/kb/Main/security-bulletin-sep-2026/",
        "source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
        "tags": null
      }
    ],
    "metrics": {
      "cvss_metric_v40": [
        {
          "source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
          "type": "Secondary",
          "cvss_data": {
            "version": "4.0",
            "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "attack_requirements": "NONE",
            "privileges_required": "HIGH",
            "user_interaction": "NONE",
            "vulnerable_system_confidentiality": null,
            "vulnerable_system_integrity": null,
            "vulnerable_system_availability": null,
            "subsequent_system_confidentiality": null,
            "subsequent_system_integrity": null,
            "subsequent_system_availability": null,
            "exploit_maturity": "PROOF_OF_CONCEPT",
            "confidentiality_requirements": null,
            "integrity_requirements": null,
            "availability_requirements": null,
            "modified_attack_vector": "NOT_DEFINED",
            "modified_attack_complexity": "NOT_DEFINED",
            "modified_attack_requirements": "NOT_DEFINED",
            "modified_privileges_required": "NOT_DEFINED",
            "modified_user_interaction": "NOT_DEFINED",
            "modified_vulnerable_system_confidentiality": null,
            "modified_vulnerable_system_integrity": null,
            "modified_vulnerable_system_availability": null,
            "modified_subsequent_system_confidentiality": null,
            "modified_subsequent_system_integrity": null,
            "modified_subsequent_system_availability": null,
            "safety": null,
            "automatable": null,
            "recovery": null,
            "value_density": "NOT_DEFINED",
            "vulnerability_response_effort": "NOT_DEFINED",
            "provider_urgency": "NOT_DEFINED",
            "base_score": 7.3,
            "base_severity": "HIGH"
          }
        }
      ],
      "cvss_metric_v31": null,
      "cvss_metric_v30": null,
      "cvss_metric_v2": null
    },
    "weaknesses": [
      {
        "source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
        "type": "Secondary",
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          },
          {
            "lang": "en",
            "value": "CWE-78"
          }
        ]
      }
    ],
    "configurations": null,
    "vendor_comments": null,
    "enrichment": {
      "cpe": null,
      "cwe": [
        {
          "id": 78,
          "owasptop10_2021": "A03 Injection",
          "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
          "description": "The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.",
          "capec_id": [
            6,
            15,
            43,
            88,
            108
          ],
          "scope": [
            "Availability",
            "Confidentiality",
            "Integrity",
            "Non-Repudiation"
          ],
          "impact": [
            "DoS: Crash, Exit, or Restart",
            "Execute Unauthorized Code or Commands",
            "Hide Activities",
            "Modify Application Data",
            "Modify Files or Directories",
            "Read Application Data",
            "Read Files or Directories"
          ],
          "detection_method": [
            "Architecture or Design Review",
            "Automated Dynamic Analysis",
            "Automated Static Analysis",
            "Automated Static Analysis - Binary or Bytecode",
            "Automated Static Analysis - Source Code",
            "Dynamic Analysis with Automated Results Interpretation",
            "Dynamic Analysis with Manual Results Interpretation",
            "Manual Static Analysis",
            "Manual Static Analysis - Source Code"
          ]
        },
        {
          "id": 22,
          "owasptop10_2021": "A01 Broken Access Control",
          "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
          "description": "The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.",
          "capec_id": [
            64,
            76,
            78,
            79,
            126
          ],
          "scope": [
            "Availability",
            "Confidentiality",
            "Integrity"
          ],
          "impact": [
            "DoS: Crash, Exit, or Restart",
            "Execute Unauthorized Code or Commands",
            "Modify Files or Directories",
            "Read Files or Directories"
          ],
          "detection_method": [
            "Architecture or Design Review",
            "Automated Static Analysis",
            "Automated Static Analysis - Binary or Bytecode",
            "Automated Static Analysis - Source Code",
            "Dynamic Analysis with Automated Results Interpretation",
            "Dynamic Analysis with Manual Results Interpretation",
            "Manual Static Analysis",
            "Manual Static Analysis - Binary or Bytecode",
            "Manual Static Analysis - Source Code"
          ]
        }
      ],
      "epss_score": null,
      "cisa_kev": null,
      "vdeep_metric": {
        "available_versions": [
          "4.0"
        ],
        "source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
        "type": "Secondary",
        "cvss_data": {
          "version": "4.0",
          "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "attack_vector": "NETWORK",
          "attack_complexity": "LOW",
          "attack_requirements": "NONE",
          "privileges_required": "HIGH",
          "user_interaction": "NONE",
          "vulnerable_system_confidentiality": null,
          "vulnerable_system_integrity": null,
          "vulnerable_system_availability": null,
          "subsequent_system_confidentiality": null,
          "subsequent_system_integrity": null,
          "subsequent_system_availability": null,
          "exploit_maturity": "PROOF_OF_CONCEPT",
          "confidentiality_requirements": null,
          "integrity_requirements": null,
          "availability_requirements": null,
          "modified_attack_vector": "NOT_DEFINED",
          "modified_attack_complexity": "NOT_DEFINED",
          "modified_attack_requirements": "NOT_DEFINED",
          "modified_privileges_required": "NOT_DEFINED",
          "modified_user_interaction": "NOT_DEFINED",
          "modified_vulnerable_system_confidentiality": null,
          "modified_vulnerable_system_integrity": null,
          "modified_vulnerable_system_availability": null,
          "modified_subsequent_system_confidentiality": null,
          "modified_subsequent_system_integrity": null,
          "modified_subsequent_system_availability": null,
          "safety": null,
          "automatable": null,
          "recovery": null,
          "value_density": "NOT_DEFINED",
          "vulnerability_response_effort": "NOT_DEFINED",
          "provider_urgency": "NOT_DEFINED",
          "base_score": 7.3,
          "base_severity": "HIGH"
        }
      }
    }
  },
  {
    "id": "CVE-2026-81645",
    "source_identifier": "user@huawei.com",
    "published": "2026-09-24T07:16:33Z",
    "last_modified": "2026-09-24T07:16:33Z",
    "status": "Received",
    "evaluator_comment": null,
    "evaluator_solution": null,
    "evaluator_impact": null,
    "cisa_exploit_add": null,
    "cisa_action_due": null,
    "cisa_required_action": null,
    "cisa_vulnerability_name": null,
    "descriptions": [
      {
        "lang": "en",
        "value": "Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability."
      }
    ],
    "references": [
      {
        "url": "https://consumer.huawei.com/en/support/bulletin/2026/9/",
        "source": "user@huawei.com",
        "tags": null
      },
      {
        "url": "https://consumer.huawei.com/en/support/bulletinlaptops/2026/9/",
        "source": "user@huawei.com",
        "tags": null
      },
      {
        "url": "https://consumer.huawei.com/en/support/bulletinvision/2026/9/",
        "source": "user@huawei.com",
        "tags": null
      },
      {
        "url": "https://consumer.huawei.com/en/support/bulletinwearables/2026/9/",
        "source": "user@huawei.com",
        "tags": null
      }
    ],
    "metrics": {
      "cvss_metric_v40": null,
      "cvss_metric_v31": [
        {
          "source": "user@huawei.com",
          "type": "Secondary",
          "cvss_data": {
            "version": "3.1",
            "vector_string": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "attack_vector": "LOCAL",
            "attack_complexity": "LOW",
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "scope": "UNCHANGED",
            "confidentiality_impact": "LOW",
            "integrity_impact": "LOW",
            "availability_impact": "LOW",
            "base_score": 5.9,
            "base_severity": "MEDIUM",
            "exploit_code_maturity": null,
            "remediation_level": null,
            "report_confidence": null,
            "temporal_score": null,
            "temporal_severity": null,
            "confidentiality_requirement": null,
            "integrity_requirement": null,
            "availability_requirement": null,
            "modified_attack_vector": null,
            "modified_attack_complexity": null,
            "modified_privileges_required": null,
            "modified_user_interaction": null,
            "modified_scope": null,
            "modified_confidentiality_impact": null,
            "modified_integrity_impact": null,
            "modified_availability_impact": null,
            "environmental_score": null,
            "environmental_severity": null
          },
          "exploitability_score": 2.5,
          "impact_score": 3.4
        }
      ],
      "cvss_metric_v30": null,
      "cvss_metric_v2": null
    },
    "weaknesses": [
      {
        "source": "user@huawei.com",
        "type": "Secondary",
        "description": [
          {
            "lang": "en",
            "value": "CWE-125"
          }
        ]
      }
    ],
    "configurations": null,
    "vendor_comments": null,
    "enrichment": {
      "cpe": null,
      "cwe": [
        {
          "id": 125,
          "owasptop10_2021": null,
          "name": "Out-of-bounds Read",
          "description": "The product reads data past the end, or before the beginning, of the intended buffer.",
          "capec_id": [
            540
          ],
          "scope": [
            "Availability",
            "Confidentiality",
            "Other"
          ],
          "impact": [
            "Bypass Protection Mechanism",
            "DoS: Crash, Exit, or Restart",
            "Read Memory",
            "Varies by Context"
          ],
          "detection_method": [
            "Automated Dynamic Analysis",
            "Automated Static Analysis",
            "Fuzzing"
          ]
        }
      ],
      "epss_score": null,
      "cisa_kev": null,
      "vdeep_metric": {
        "available_versions": [
          "3.1"
        ],
        "source": "user@huawei.com",
        "type": "Secondary",
        "cvss_data": {
          "version": "3.1",
          "vector_string": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "attack_vector": "LOCAL",
          "attack_complexity": "LOW",
          "attack_requirements": null,
          "privileges_required": "NONE",
          "user_interaction": "NONE",
          "vulnerable_system_confidentiality": "LOW",
          "vulnerable_system_integrity": "LOW",
          "vulnerable_system_availability": "LOW",
          "subsequent_system_confidentiality": null,
          "subsequent_system_integrity": null,
          "subsequent_system_availability": null,
          "exploit_maturity": null,
          "confidentiality_requirements": null,
          "integrity_requirements": null,
          "availability_requirements": null,
          "modified_attack_vector": null,
          "modified_attack_complexity": null,
          "modified_attack_requirements": null,
          "modified_privileges_required": null,
          "modified_user_interaction": null,
          "modified_vulnerable_system_confidentiality": null,
          "modified_vulnerable_system_integrity": null,
          "modified_vulnerable_system_availability": null,
          "modified_subsequent_system_confidentiality": null,
          "modified_subsequent_system_integrity": null,
          "modified_subsequent_system_availability": null,
          "safety": null,
          "automatable": null,
          "recovery": null,
          "value_density": null,
          "vulnerability_response_effort": null,
          "provider_urgency": null,
          "base_score": 5.9,
          "base_severity": "MEDIUM"
        }
      }
    }
  }
]

Content-Type: application/json
ratelimit-limit: 1
ratelimit-remaining: 0
ratelimit-reset: 1
x-ratelimit-limit-second: 1
x-ratelimit-remaining-second: 0
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on Latest Added; the exact request is in the code panel.

This request sends no parameters.

Reference updated September 24, 2026

Request

Related Examples