Vulnerability Search Examples · Example 1 of 3 in Filters › EPSS

EPSS 0.9 and Up

POSThttps://api.deepinfo.com/v1/discovery/vulnerability-search

CVEs whose EPSS score, the chance of exploitation in the next 30 days, is 0.9 or higher.

Field: enrichment.epss_score.epss
Operator: gte

enrichment.epss_score.epss is the EPSS score: the probability (0 to 1) that the CVE is exploited in the next 30 days.

gte matches 0.9 and above.

In the response, look at results[].enrichment.epss_score.epss.

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "filters": {
    "must": [
      {
        "name": "enrichment.epss_score.epss",
        "type": "gte",
        "value": 0.9
      }
    ]
  }
}'

Python

import requests

url = "https://api.deepinfo.com/v1/discovery/vulnerability-search"

params = {
    "page_size": "25"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {
    "filters": {
        "must": [
            {
                "name": "enrichment.epss_score.epss",
                "type": "gte",
                "value": 0.9
            }
        ]
    }
}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    filters: {
      must: [
        {
          name: "enrichment.epss_score.epss",
          type: "gte",
          value: 0.9
        }
      ]
    }
  }),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{
  "filters": {
    "must": [
      {
        "name": "enrichment.epss_score.epss",
        "type": "gte",
        "value": 0.9
      }
    ]
  }
}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        String body = """
            {
              "filters": {
                "must": [
                  {
                    "name": "enrichment.epss_score.epss",
                    "type": "gte",
                    "value": 0.9
                  }
                ]
              }
            }""";

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(body))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var body = """
    {
      "filters": {
        "must": [
          {
            "name": "enrichment.epss_score.epss",
            "type": "gte",
            "value": 0.9
          }
        ]
      }
    }
    """;

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent(body, Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$body = <<<'JSON'
{
  "filters": {
    "must": [
      {
        "name": "enrichment.epss_score.epss",
        "type": "gte",
        "value": 0.9
      }
    ]
  }
}
JSON;

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => $body,
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/discovery/vulnerability-search?page_size=25')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = <<~'JSON'.chomp
  {
    "filters": {
      "must": [
        {
          "name": "enrichment.epss_score.epss",
          "type": "gte",
          "value": 0.9
        }
      ]
    }
  }
JSON

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Shortened for this page: results: 3 of 25 shown; results[].configurations[].nodes[].cpe_match: first 10 items; results[].enrichment.cpe: first 10 items

Response Body

{
  "page": 1,
  "page_size": 25,
  "result_count": 802,
  "results": [
    {
      "id": "CVE-2026-72898",
      "source_identifier": "9119a7d8-5eab-497f-8521-727c672e3725",
      "published": "2026-08-10T18:18:53Z",
      "last_modified": "2026-08-12T15:18:30Z",
      "status": "Analyzed",
      "evaluator_comment": null,
      "evaluator_solution": null,
      "evaluator_impact": null,
      "cisa_exploit_add": "2026-08-11",
      "cisa_action_due": "2026-08-14",
      "cisa_required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
      "cisa_vulnerability_name": "Metabase SQL Injection Vulnerability",
      "descriptions": [
        {
          "lang": "en",
          "value": "Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance."
        }
      ],
      "references": [
        {
          "url": "https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf",
          "source": "9119a7d8-5eab-497f-8521-727c672e3725",
          "tags": [
            "Mitigation",
            "Patch",
            "Vendor Advisory"
          ]
        },
        {
          "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-222-01.json",
          "source": "9119a7d8-5eab-497f-8521-727c672e3725",
          "tags": [
            "Third Party Advisory"
          ]
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-72898",
          "source": "9119a7d8-5eab-497f-8521-727c672e3725",
          "tags": [
            "VDB Entry"
          ]
        },
        {
          "url": "https://www.metabase.com/blog/security-update",
          "source": "9119a7d8-5eab-497f-8521-727c672e3725",
          "tags": [
            "Mitigation",
            "Patch",
            "Vendor Advisory"
          ]
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-72898",
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "tags": [
            "US Government Resource"
          ]
        }
      ],
      "metrics": {
        "cvss_metric_v40": [
          {
            "source": "9119a7d8-5eab-497f-8521-727c672e3725",
            "type": "Secondary",
            "cvss_data": {
              "version": "4.0",
              "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
              "attack_vector": "NETWORK",
              "attack_complexity": "LOW",
              "attack_requirements": "NONE",
              "privileges_required": "NONE",
              "user_interaction": "NONE",
              "vulnerable_system_confidentiality": null,
              "vulnerable_system_integrity": null,
              "vulnerable_system_availability": null,
              "subsequent_system_confidentiality": null,
              "subsequent_system_integrity": null,
              "subsequent_system_availability": null,
              "exploit_maturity": "NOT_DEFINED",
              "confidentiality_requirements": null,
              "integrity_requirements": null,
              "availability_requirements": null,
              "modified_attack_vector": "NOT_DEFINED",
              "modified_attack_complexity": "NOT_DEFINED",
              "modified_attack_requirements": "NOT_DEFINED",
              "modified_privileges_required": "NOT_DEFINED",
              "modified_user_interaction": "NOT_DEFINED",
              "modified_vulnerable_system_confidentiality": null,
              "modified_vulnerable_system_integrity": null,
              "modified_vulnerable_system_availability": null,
              "modified_subsequent_system_confidentiality": null,
              "modified_subsequent_system_integrity": null,
              "modified_subsequent_system_availability": null,
              "safety": null,
              "automatable": null,
              "recovery": null,
              "value_density": "NOT_DEFINED",
              "vulnerability_response_effort": "NOT_DEFINED",
              "provider_urgency": "NOT_DEFINED",
              "base_score": 10.0,
              "base_severity": "CRITICAL"
            }
          }
        ],
        "cvss_metric_v31": [
          {
            "source": "9119a7d8-5eab-497f-8521-727c672e3725",
            "type": "Secondary",
            "cvss_data": {
              "version": "3.1",
              "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
              "attack_vector": "NETWORK",
              "attack_complexity": "LOW",
              "privileges_required": "NONE",
              "user_interaction": "NONE",
              "scope": "CHANGED",
              "confidentiality_impact": "HIGH",
              "integrity_impact": "HIGH",
              "availability_impact": "HIGH",
              "base_score": 10.0,
              "base_severity": "CRITICAL",
              "exploit_code_maturity": null,
              "remediation_level": null,
              "report_confidence": null,
              "temporal_score": null,
              "temporal_severity": null,
              "confidentiality_requirement": null,
              "integrity_requirement": null,
              "availability_requirement": null,
              "modified_attack_vector": null,
              "modified_attack_complexity": null,
              "modified_privileges_required": null,
              "modified_user_interaction": null,
              "modified_scope": null,
              "modified_confidentiality_impact": null,
              "modified_integrity_impact": null,
              "modified_availability_impact": null,
              "environmental_score": null,
              "environmental_severity": null
            },
            "exploitability_score": 3.9,
            "impact_score": 6.0
          }
        ],
        "cvss_metric_v30": null,
        "cvss_metric_v2": null
      },
      "weaknesses": [
        {
          "source": "9119a7d8-5eab-497f-8521-727c672e3725",
          "type": "Secondary",
          "description": [
            {
              "lang": "en",
              "value": "CWE-89"
            }
          ]
        }
      ],
      "configurations": [
        {
          "operator": null,
          "negate": null,
          "nodes": [
            {
              "operator": "OR",
              "negate": false,
              "cpe_match": [
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
                  "match_criteria_id": "F8213D45-9A31-4B33-AEE2-46E1DC824799",
                  "version_start_including": "0.58.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "0.58.24"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
                  "match_criteria_id": "3DA1C6EA-45C1-4F4A-8A94-9A85A4EAA659",
                  "version_start_including": "0.59.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "0.59.21"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
                  "match_criteria_id": "2D06D9D9-092B-4191-8F53-01E0B8936373",
                  "version_start_including": "0.60.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "0.60.17"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
                  "match_criteria_id": "58026B24-B825-41C5-A6AB-07DCFAC86BA8",
                  "version_start_including": "0.61.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "0.61.11"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
                  "match_criteria_id": "58DB3F1E-C017-47DB-A9EC-BE2A7BCE7969",
                  "version_start_including": "0.62.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "0.62.9"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
                  "match_criteria_id": "953341C6-9022-439D-BE3D-64925359F0DF",
                  "version_start_including": "0.63.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "0.63.5"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
                  "match_criteria_id": "F43FE1BC-849E-4CC0-B2FC-C24F1EB9E74D",
                  "version_start_including": "1.58.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "1.58.24"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
                  "match_criteria_id": "5697F23D-749D-4CEA-8024-721B914AC28F",
                  "version_start_including": "1.59.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "1.59.21"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
                  "match_criteria_id": "E8383356-C138-41BB-9B50-0A31FE1FAB04",
                  "version_start_including": "1.60.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "1.60.17"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
                  "match_criteria_id": "02DCC833-E08F-400E-B1F3-D6C5E370F979",
                  "version_start_including": "1.61.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "1.61.11"
                }
              ]
            }
          ]
        }
      ],
      "vendor_comments": null,
      "enrichment": {
        "cpe": [
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "0.58.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "0.58.24",
            "affected_versions_first": "0.58.0",
            "affected_versions_last": "0.58.23"
          },
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "0.59.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "0.59.21",
            "affected_versions_first": "0.59.0",
            "affected_versions_last": "0.59.20"
          },
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "0.60.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "0.60.17",
            "affected_versions_first": "0.60.0",
            "affected_versions_last": "0.60.16"
          },
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "0.61.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "0.61.11",
            "affected_versions_first": "0.61.0",
            "affected_versions_last": "0.61.10"
          },
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "0.62.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "0.62.9",
            "affected_versions_first": "0.62.0",
            "affected_versions_last": "0.62.8"
          },
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:-:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "0.63.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "0.63.5",
            "affected_versions_first": "0.63.0",
            "affected_versions_last": "0.63.3"
          },
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "1.58.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "1.58.24",
            "affected_versions_first": "1.58.0",
            "affected_versions_last": "1.58.23"
          },
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "1.59.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "1.59.21",
            "affected_versions_first": "1.59.0",
            "affected_versions_last": "1.59.20"
          },
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "1.60.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "1.60.17",
            "affected_versions_first": "1.60.0",
            "affected_versions_last": "1.60.16"
          },
          {
            "criteria": "cpe:2.3:a:metabase:metabase:*:*:*:*:enterprise:*:*:*",
            "vendor": "metabase",
            "product": "metabase",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "1.61.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "1.61.11",
            "affected_versions_first": "1.61.0",
            "affected_versions_last": "1.61.10"
          }
        ],
        "cwe": [
          {
            "id": 89,
            "owasptop10_2021": "A03 Injection",
            "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
            "description": "The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.",
            "capec_id": [
              7,
              66,
              108,
              109,
              110,
              470
            ],
            "scope": [
              "Access Control",
              "Authentication",
              "Availability",
              "Confidentiality",
              "Integrity"
            ],
            "impact": [
              "Bypass Protection Mechanism",
              "Execute Unauthorized Code or Commands",
              "Gain Privileges or Assume Identity",
              "Modify Application Data",
              "Read Application Data"
            ],
            "detection_method": [
              "Architecture or Design Review",
              "Automated Dynamic Analysis",
              "Automated Static Analysis",
              "Automated Static Analysis - Binary or Bytecode",
              "Automated Static Analysis - Source Code",
              "Dynamic Analysis with Automated Results Interpretation",
              "Dynamic Analysis with Manual Results Interpretation",
              "Manual Analysis",
              "Manual Static Analysis - Source Code"
            ]
          }
        ],
        "epss_score": {
          "epss": 0.94217,
          "percentile": 0.99846,
          "date": "2026-09-23"
        },
        "cisa_kev": {
          "vendor_project": "Metabase",
          "product": "Metabase",
          "vulnerability_name": "Metabase SQL Injection Vulnerability",
          "date_added": "2026-08-11",
          "short_description": "Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance. From there, the attacker could change the application configuration, steal stored credentials for the connected databases, read any data accessible through those connections, and export data.",
          "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
          "due_date": "2026-08-14",
          "known_ransomware_campaign_use": "Unknown",
          "notes": "https://www.metabase.com/blog/security-update ; https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72898"
        },
        "vdeep_metric": {
          "available_versions": [
            "4.0",
            "3.1"
          ],
          "source": "9119a7d8-5eab-497f-8521-727c672e3725",
          "type": "Secondary",
          "cvss_data": {
            "version": "4.0",
            "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "attack_requirements": "NONE",
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "vulnerable_system_confidentiality": null,
            "vulnerable_system_integrity": null,
            "vulnerable_system_availability": null,
            "subsequent_system_confidentiality": null,
            "subsequent_system_integrity": null,
            "subsequent_system_availability": null,
            "exploit_maturity": "NOT_DEFINED",
            "confidentiality_requirements": null,
            "integrity_requirements": null,
            "availability_requirements": null,
            "modified_attack_vector": "NOT_DEFINED",
            "modified_attack_complexity": "NOT_DEFINED",
            "modified_attack_requirements": "NOT_DEFINED",
            "modified_privileges_required": "NOT_DEFINED",
            "modified_user_interaction": "NOT_DEFINED",
            "modified_vulnerable_system_confidentiality": null,
            "modified_vulnerable_system_integrity": null,
            "modified_vulnerable_system_availability": null,
            "modified_subsequent_system_confidentiality": null,
            "modified_subsequent_system_integrity": null,
            "modified_subsequent_system_availability": null,
            "safety": null,
            "automatable": null,
            "recovery": null,
            "value_density": "NOT_DEFINED",
            "vulnerability_response_effort": "NOT_DEFINED",
            "provider_urgency": "NOT_DEFINED",
            "base_score": 10.0,
            "base_severity": "CRITICAL"
          }
        }
      }
    },
    {
      "id": "CVE-2026-20182",
      "source_identifier": "user@cisco.com",
      "published": "2026-05-14T17:16:19Z",
      "last_modified": "2026-06-17T15:06:02Z",
      "status": "Analyzed",
      "evaluator_comment": null,
      "evaluator_solution": null,
      "evaluator_impact": null,
      "cisa_exploit_add": "2026-05-14",
      "cisa_action_due": "2026-05-17",
      "cisa_required_action": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.",
      "cisa_vulnerability_name": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability",
      "descriptions": [
        {
          "lang": "en",
          "value": "May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the  was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The  section of this advisory includes Show Control Connections guidance to help with system checks.&nbsp;\r\n\r\nA vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\r\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to the affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric."
        }
      ],
      "references": [
        {
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk",
          "source": "user@cisco.com",
          "tags": [
            "Not Applicable"
          ]
        },
        {
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW",
          "source": "user@cisco.com",
          "tags": [
            "Vendor Advisory"
          ]
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20182",
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "tags": [
            "US Government Resource"
          ]
        }
      ],
      "metrics": {
        "cvss_metric_v40": null,
        "cvss_metric_v31": [
          {
            "source": "user@cisco.com",
            "type": "Secondary",
            "cvss_data": {
              "version": "3.1",
              "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
              "attack_vector": "NETWORK",
              "attack_complexity": "LOW",
              "privileges_required": "NONE",
              "user_interaction": "NONE",
              "scope": "CHANGED",
              "confidentiality_impact": "HIGH",
              "integrity_impact": "HIGH",
              "availability_impact": "HIGH",
              "base_score": 10.0,
              "base_severity": "CRITICAL",
              "exploit_code_maturity": null,
              "remediation_level": null,
              "report_confidence": null,
              "temporal_score": null,
              "temporal_severity": null,
              "confidentiality_requirement": null,
              "integrity_requirement": null,
              "availability_requirement": null,
              "modified_attack_vector": null,
              "modified_attack_complexity": null,
              "modified_privileges_required": null,
              "modified_user_interaction": null,
              "modified_scope": null,
              "modified_confidentiality_impact": null,
              "modified_integrity_impact": null,
              "modified_availability_impact": null,
              "environmental_score": null,
              "environmental_severity": null
            },
            "exploitability_score": 3.9,
            "impact_score": 6.0
          }
        ],
        "cvss_metric_v30": null,
        "cvss_metric_v2": null
      },
      "weaknesses": [
        {
          "source": "user@cisco.com",
          "type": "Secondary",
          "description": [
            {
              "lang": "en",
              "value": "CWE-287"
            }
          ]
        }
      ],
      "configurations": [
        {
          "operator": null,
          "negate": null,
          "nodes": [
            {
              "operator": "OR",
              "negate": false,
              "cpe_match": [
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "5021D679-E23A-4D7F-B3B6-D664634A639C",
                  "version_start_including": null,
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "20.9.9.1"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "26022018-2273-4589-BE4F-AD92DA31CB58",
                  "version_start_including": "20.10",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "20.12.5.4"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "FDA5CA36-86B6-443D-B772-37A5901F3E83",
                  "version_start_including": "20.12.6",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "20.12.6.2"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "32A83687-B363-476B-89EF-B35C82575237",
                  "version_start_including": "20.13",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "20.15.4.4"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "709D0805-4B76-46A0-82D3-93C89926B389",
                  "version_start_including": "20.15.5",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "20.15.5.2"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "BB6A9216-3D47-4B33-B502-72B99859992E",
                  "version_start_including": "20.16",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "20.18.2.2"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "C34C0AB2-3E8E-4B12-BEA2-446F8F248B9A",
                  "version_start_including": "26.1",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "26.1.1.1"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.7:*:*:*:*:*:*:*",
                  "match_criteria_id": "6A03BCEF-DC25-488D-91D3-0A16F3B872E3",
                  "version_start_including": null,
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": null
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "F9862A7B-0BC5-435C-A0CB-07C2298941C1",
                  "version_start_including": null,
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "20.9.9.1"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "5C7B3B37-A914-4CFA-BD8E-665797F6BCDD",
                  "version_start_including": "20.10",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "20.12.5.4"
                }
              ]
            }
          ]
        }
      ],
      "vendor_comments": null,
      "enrichment": {
        "cpe": [
          {
            "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "catalyst_sd-wan_manager",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": null,
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "20.9.9.1",
            "affected_versions_first": "18.4.501_es",
            "affected_versions_last": "20.9.8.2"
          },
          {
            "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "catalyst_sd-wan_manager",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "20.10",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "20.12.5.4",
            "affected_versions_first": "20.10.1_li_images",
            "affected_versions_last": "20.12.5.3"
          },
          {
            "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "catalyst_sd-wan_manager",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "20.12.6",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "20.12.6.2",
            "affected_versions_first": "20.12.6",
            "affected_versions_last": "20.12.6.1"
          },
          {
            "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "catalyst_sd-wan_manager",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "20.13",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "20.15.4.4",
            "affected_versions_first": "20.13.1_li_images",
            "affected_versions_last": "20.15.4.2"
          },
          {
            "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "catalyst_sd-wan_manager",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "20.15.5",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "20.15.5.2",
            "affected_versions_first": null,
            "affected_versions_last": null
          },
          {
            "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "catalyst_sd-wan_manager",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "20.16",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "20.18.2.2",
            "affected_versions_first": "20.16",
            "affected_versions_last": "20.18.2.1"
          },
          {
            "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "catalyst_sd-wan_manager",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "26.1",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "26.1.1.1",
            "affected_versions_first": "26.1",
            "affected_versions_last": "26.1.1"
          },
          {
            "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.7:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "catalyst_sd-wan_manager",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": null,
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": null,
            "affected_versions_first": "20.12.7",
            "affected_versions_last": "20.12.7"
          },
          {
            "criteria": "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "sd-wan_vbond_orchestrator",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": null,
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "20.9.9.1",
            "affected_versions_first": "20.4",
            "affected_versions_last": "20.9.9"
          },
          {
            "criteria": "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
            "vendor": "cisco",
            "product": "sd-wan_vbond_orchestrator",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "20.10",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "20.12.5.4",
            "affected_versions_first": "20.10",
            "affected_versions_last": "20.12.5.3"
          }
        ],
        "cwe": [
          {
            "id": 287,
            "owasptop10_2021": "A07 Identification and Authentication Failures",
            "name": "Improper Authentication",
            "description": "When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.",
            "capec_id": [
              22,
              57,
              94,
              114,
              115,
              151,
              194,
              593,
              633,
              650
            ],
            "scope": [
              "Access Control",
              "Availability",
              "Confidentiality",
              "Integrity"
            ],
            "impact": [
              "Execute Unauthorized Code or Commands",
              "Gain Privileges or Assume Identity",
              "Read Application Data"
            ],
            "detection_method": [
              "Architecture or Design Review",
              "Automated Static Analysis",
              "Automated Static Analysis - Source Code",
              "Dynamic Analysis with Automated Results Interpretation",
              "Dynamic Analysis with Manual Results Interpretation",
              "Manual Static Analysis",
              "Manual Static Analysis - Binary or Bytecode",
              "Manual Static Analysis - Source Code"
            ]
          }
        ],
        "epss_score": {
          "epss": 0.91522,
          "percentile": 0.99809,
          "date": "2026-09-23"
        },
        "cisa_kev": {
          "vendor_project": "Cisco",
          "product": "Catalyst SD-WAN",
          "vulnerability_name": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability",
          "date_added": "2026-05-14",
          "short_description": "Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.",
          "required_action": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.",
          "due_date": "2026-05-17",
          "known_ransomware_campaign_use": "Unknown",
          "notes": "CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW ; https://nvd.nist.gov/vuln/detail/CVE-2026-20182"
        },
        "vdeep_metric": {
          "available_versions": [
            "3.1"
          ],
          "source": "user@cisco.com",
          "type": "Secondary",
          "cvss_data": {
            "version": "3.1",
            "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "attack_requirements": null,
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "vulnerable_system_confidentiality": "HIGH",
            "vulnerable_system_integrity": "HIGH",
            "vulnerable_system_availability": "HIGH",
            "subsequent_system_confidentiality": null,
            "subsequent_system_integrity": null,
            "subsequent_system_availability": null,
            "exploit_maturity": null,
            "confidentiality_requirements": null,
            "integrity_requirements": null,
            "availability_requirements": null,
            "modified_attack_vector": null,
            "modified_attack_complexity": null,
            "modified_attack_requirements": null,
            "modified_privileges_required": null,
            "modified_user_interaction": null,
            "modified_vulnerable_system_confidentiality": null,
            "modified_vulnerable_system_integrity": null,
            "modified_vulnerable_system_availability": null,
            "modified_subsequent_system_confidentiality": null,
            "modified_subsequent_system_integrity": null,
            "modified_subsequent_system_availability": null,
            "safety": null,
            "automatable": null,
            "recovery": null,
            "value_density": null,
            "vulnerability_response_effort": null,
            "provider_urgency": null,
            "base_score": 10.0,
            "base_severity": "CRITICAL"
          }
        }
      }
    },
    {
      "id": "CVE-2026-10520",
      "source_identifier": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
      "published": "2026-06-09T16:16:35Z",
      "last_modified": "2026-07-23T08:10:00Z",
      "status": "Analyzed",
      "evaluator_comment": null,
      "evaluator_solution": null,
      "evaluator_impact": null,
      "cisa_exploit_add": "2026-06-11",
      "cisa_action_due": "2026-06-14",
      "cisa_required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
      "cisa_vulnerability_name": "Ivanti Sentry OS Command Injection Vulnerability",
      "descriptions": [
        {
          "lang": "en",
          "value": "An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution"
        },
        {
          "lang": "es",
          "value": "Una vulnerabilidad de inyección de comandos del sistema operativo en Ivanti Sentry anterior a las versiones R10.5.2, R10.6.2 y R10.7.1 permite a un usuario remoto no autenticado lograr ejecución remota de código a nivel de root."
        }
      ],
      "references": [
        {
          "url": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US",
          "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ]
        },
        {
          "url": "https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523",
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "tags": [
            "Third Party Advisory"
          ]
        },
        {
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520",
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "tags": [
            "US Government Resource"
          ]
        }
      ],
      "metrics": {
        "cvss_metric_v40": null,
        "cvss_metric_v31": [
          {
            "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
            "type": "Secondary",
            "cvss_data": {
              "version": "3.1",
              "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
              "attack_vector": "NETWORK",
              "attack_complexity": "LOW",
              "privileges_required": "NONE",
              "user_interaction": "NONE",
              "scope": "CHANGED",
              "confidentiality_impact": "HIGH",
              "integrity_impact": "HIGH",
              "availability_impact": "HIGH",
              "base_score": 10.0,
              "base_severity": "CRITICAL",
              "exploit_code_maturity": null,
              "remediation_level": null,
              "report_confidence": null,
              "temporal_score": null,
              "temporal_severity": null,
              "confidentiality_requirement": null,
              "integrity_requirement": null,
              "availability_requirement": null,
              "modified_attack_vector": null,
              "modified_attack_complexity": null,
              "modified_privileges_required": null,
              "modified_user_interaction": null,
              "modified_scope": null,
              "modified_confidentiality_impact": null,
              "modified_integrity_impact": null,
              "modified_availability_impact": null,
              "environmental_score": null,
              "environmental_severity": null
            },
            "exploitability_score": 3.9,
            "impact_score": 6.0
          }
        ],
        "cvss_metric_v30": null,
        "cvss_metric_v2": null
      },
      "weaknesses": [
        {
          "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
          "type": "Secondary",
          "description": [
            {
              "lang": "en",
              "value": "CWE-78"
            }
          ]
        }
      ],
      "configurations": [
        {
          "operator": null,
          "negate": null,
          "nodes": [
            {
              "operator": "OR",
              "negate": false,
              "cpe_match": [
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:ivanti:standalone_sentry:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "C33107C3-2CB4-495C-ACB2-F1440ADAA2B0",
                  "version_start_including": null,
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "10.5.2"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:ivanti:standalone_sentry:*:*:*:*:*:*:*:*",
                  "match_criteria_id": "F5579D89-84ED-45BA-922F-B84DC5E3EE93",
                  "version_start_including": "10.6.0",
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": "10.6.2"
                },
                {
                  "vulnerable": true,
                  "criteria": "cpe:2.3:a:ivanti:standalone_sentry:10.7.0:*:*:*:*:*:*:*",
                  "match_criteria_id": "7F16798C-197D-4CED-BCD1-9C93A28D29D2",
                  "version_start_including": null,
                  "version_start_excluding": null,
                  "version_end_including": null,
                  "version_end_excluding": null
                }
              ]
            }
          ]
        }
      ],
      "vendor_comments": null,
      "enrichment": {
        "cpe": [
          {
            "criteria": "cpe:2.3:a:ivanti:standalone_sentry:*:*:*:*:*:*:*:*",
            "vendor": "ivanti",
            "product": "standalone_sentry",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": null,
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "10.5.2",
            "affected_versions_first": "9.14.0",
            "affected_versions_last": "10.5.1"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:standalone_sentry:*:*:*:*:*:*:*:*",
            "vendor": "ivanti",
            "product": "standalone_sentry",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": "10.6.0",
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": "10.6.2",
            "affected_versions_first": "10.6.0",
            "affected_versions_last": "10.6.1"
          },
          {
            "criteria": "cpe:2.3:a:ivanti:standalone_sentry:10.7.0:*:*:*:*:*:*:*",
            "vendor": "ivanti",
            "product": "standalone_sentry",
            "product_type": "a",
            "vulnerable": true,
            "version_start_including": null,
            "version_start_excluding": null,
            "version_end_including": null,
            "version_end_excluding": null,
            "affected_versions_first": "10.7.0",
            "affected_versions_last": "10.7.0"
          }
        ],
        "cwe": [
          {
            "id": 78,
            "owasptop10_2021": "A03 Injection",
            "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
            "description": "The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.",
            "capec_id": [
              6,
              15,
              43,
              88,
              108
            ],
            "scope": [
              "Availability",
              "Confidentiality",
              "Integrity",
              "Non-Repudiation"
            ],
            "impact": [
              "DoS: Crash, Exit, or Restart",
              "Execute Unauthorized Code or Commands",
              "Hide Activities",
              "Modify Application Data",
              "Modify Files or Directories",
              "Read Application Data",
              "Read Files or Directories"
            ],
            "detection_method": [
              "Architecture or Design Review",
              "Automated Dynamic Analysis",
              "Automated Static Analysis",
              "Automated Static Analysis - Binary or Bytecode",
              "Automated Static Analysis - Source Code",
              "Dynamic Analysis with Automated Results Interpretation",
              "Dynamic Analysis with Manual Results Interpretation",
              "Manual Static Analysis",
              "Manual Static Analysis - Source Code"
            ]
          }
        ],
        "epss_score": {
          "epss": 0.99915,
          "percentile": 0.99968,
          "date": "2026-09-23"
        },
        "cisa_kev": {
          "vendor_project": "Ivanti",
          "product": "Sentry",
          "vulnerability_name": "Ivanti Sentry OS Command Injection Vulnerability",
          "date_added": "2026-06-11",
          "short_description": "Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level remote code execution. This vulnerability can be successfully exploited in cases where the Sentry appliance is in an unmanaged state with its endpoints externally reachable. The use of mTLS with EPMM or restricted HTTPS access through Neurons for MDM makes interfaces inaccessible to external actors.",
          "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
          "due_date": "2026-06-14",
          "known_ransomware_campaign_use": "Unknown",
          "notes": "https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-10520"
        },
        "vdeep_metric": {
          "available_versions": [
            "3.1"
          ],
          "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
          "type": "Secondary",
          "cvss_data": {
            "version": "3.1",
            "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "attack_requirements": null,
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "vulnerable_system_confidentiality": "HIGH",
            "vulnerable_system_integrity": "HIGH",
            "vulnerable_system_availability": "HIGH",
            "subsequent_system_confidentiality": null,
            "subsequent_system_integrity": null,
            "subsequent_system_availability": null,
            "exploit_maturity": null,
            "confidentiality_requirements": null,
            "integrity_requirements": null,
            "availability_requirements": null,
            "modified_attack_vector": null,
            "modified_attack_complexity": null,
            "modified_attack_requirements": null,
            "modified_privileges_required": null,
            "modified_user_interaction": null,
            "modified_vulnerable_system_confidentiality": null,
            "modified_vulnerable_system_integrity": null,
            "modified_vulnerable_system_availability": null,
            "modified_subsequent_system_confidentiality": null,
            "modified_subsequent_system_integrity": null,
            "modified_subsequent_system_availability": null,
            "safety": null,
            "automatable": null,
            "recovery": null,
            "value_density": null,
            "vulnerability_response_effort": null,
            "provider_urgency": null,
            "base_score": 10.0,
            "base_severity": "CRITICAL"
          }
        }
      }
    }
  ]
}

Content-Type: application/json
ratelimit-limit: 1
ratelimit-remaining: 0
ratelimit-reset: 1
x-ratelimit-limit-second: 1
x-ratelimit-remaining-second: 0
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on Search; the exact request is in the code panel.

Parameter	Value
`page_size`query	`25`
`filters.must[0].name`body	`enrichment.epss_score.epss`
`filters.must[0].type`body	`gte`
`filters.must[0].value`body	`0.9`

Reference updated September 26, 2026

Request

Related Examples