API & feeds

The archive (500 CVEs, 303 AI-analysed) is served as static JSON — no key required, no rate limit, CORS-open. Higher-volume programmatic access, watchlist webhooks, and change-alerts ship with Pro.

GET/api/v1/cves.json

Full index: every indexed CVE with severity, tags, AI summary, and exploit flag.

GET/api/v1/cve/CVE-YYYY-NNNN.json

Full record for one CVE, including AI risk analysis and all references.

GET/feed.xml

RSS 2.0 feed of the 50 most recent CVEs — wire it into your SIEM or reader.

Example

curl https://exploit-db.ai/api/v1/cves.json | jq '.data[0]'

{
  "id": "CVE-YYYY-NNNN",
  "cvssScore": 9.8,
  "cvssSeverity": "CRITICAL",
  "hasPoc": true,
  "tags": ["rce", "auth-bypass"],
  "summary": "Plain-language AI risk summary…"
}

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.