{ "x402Version": 2, "id": 37243, "slug": "37243", "resource": "https://api.vextorium.com/vulnerabilidades-explotadas-pago", "description": "Vulnerabilities being actively exploited according to CISA's KEV catalog: CVE, vendor, product, name, description, date added, remediation due date and ransomware use; the latest N days or search by vendor/product (Microsoft, Cisco, Fortinet...).", "type": "http", "serviceName": "Vextorium", "resourceType": "Beauty & Personal Care", "accepts": [ { "scheme": "exact", "network": "eip155:8453", "payTo": "0xb9f06D2734B7E9D7b21B64C4D8b95bd774b71aCf", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "amount": "3000", "amountUsd": 0.003, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp", "payTo": "HcjfmZLgWRZzwj4deEiS7pewc4KBYSw39mW5nTyt3pz2", "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v", "amount": "3000", "amountUsd": 0.003, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:137", "payTo": "0xb9f06D2734B7E9D7b21B64C4D8b95bd774b71aCf", "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359", "amount": "3000", "amountUsd": 0.003, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "eip155:10", "payTo": "0xb9f06D2734B7E9D7b21B64C4D8b95bd774b71aCf", "asset": "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85", "amount": "3000", "maxTimeoutSeconds": 604900 }, { "scheme": "exact", "network": "eip155:5042", "payTo": "0xb9f06D2734B7E9D7b21B64C4D8b95bd774b71aCf", "asset": "0x3600000000000000000000000000000000000000", "amount": "3000", "maxTimeoutSeconds": 604900 } ], "outputSchema": { "properties": { "example": { "properties": { "catalogo": { "type": [ "string", "null" ] }, "coincidencias": { "type": [ "number", "null" ] }, "fuente": { "type": [ "string", "null" ] }, "total_catalogo": { "type": [ "number", "null" ] }, "vulnerabilidades": { "items": { "properties": { "accion": { "type": [ "null", "string" ] }, "alta": { "type": [ "null", "string" ] }, "cve": { "type": [ "null", "string" ] }, "cwe": { "items": { "type": [ "null", "string" ] }, "type": [ "array", "null" ] }, "descripcion": { "type": [ "null", "string" ] }, "fabricante": { "type": [ "null", "string" ] }, "nombre": { "type": [ "null", "string" ] }, "plazo_correccion": { "type": [ "null", "string" ] }, "producto": { "type": [ "null", "string" ] }, "ransomware": { "type": [ "null", "string" ] } }, "type": [ "null", "object" ] }, "type": [ "array", "null" ] } }, "type": [ "object", "null" ] }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" }, "extensions": { "bazaar": { "info": { "input": { "body": { "dias": 14, "limite": 2 }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "catalogo": "2026.10.02", "coincidencias": 17, "fuente": "CISA Known Exploited Vulnerabilities (dominio público de EE. UU.)", "total_catalogo": 1733, "vulnerabilidades": [ { "accion": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon…", "alta": "2026-10-02", "cve": "CVE-2026-102490", "cwe": [ "CWE-269" ], "descripcion": "Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.", "fabricante": "Zammad GmbH", "nombre": "Zammad GmbH Zammad Improper Privilege Management Vulnerability", "plazo_correccion": "2026-10-05", "producto": "Zammad", "ransomware": "Unknown" }, { "accion": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon…", "alta": "2026-10-02", "cve": "CVE-2026-102489", "cwe": [ "CWE-384" ], "descripcion": "Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.", "fabricante": "Zammad GmbH", "nombre": "Zammad GmbH Zammad Session Fixation Vulnerability", "plazo_correccion": "2026-10-05", "producto": "Zammad", "ransomware": "Unknown" } ] }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "properties": { "buscar": { "type": "string" }, "dias": { "type": "integer" }, "limite": { "type": "integer" }, "ransomware": { "type": "boolean" } }, "required": [] }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "properties": { "catalogo": { "type": [ "string", "null" ] }, "coincidencias": { "type": [ "number", "null" ] }, "fuente": { "type": [ "string", "null" ] }, "total_catalogo": { "type": [ "number", "null" ] }, "vulnerabilidades": { "items": { "properties": { "accion": { "type": [ "null", "string" ] }, "alta": { "type": [ "null", "string" ] }, "cve": { "type": [ "null", "string" ] }, "cwe": { "items": { "type": [ "null", "string" ] }, "type": [ "array", "null" ] }, "descripcion": { "type": [ "null", "string" ] }, "fabricante": { "type": [ "null", "string" ] }, "nombre": { "type": [ "null", "string" ] }, "plazo_correccion": { "type": [ "null", "string" ] }, "producto": { "type": [ "null", "string" ] }, "ransomware": { "type": [ "null", "string" ] } }, "type": [ "null", "object" ] }, "type": [ "array", "null" ] } }, "type": [ "object", "null" ] }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } } }, "tags": [ "cve", "kev", "vulnerabilities", "security", "patching", "bazaar" ], "sourceHost": "api.vextorium.com", "lastUpdated": "2026-10-07T01:24:57.851Z", "quality": { "calls30d": 2, "uniquePayers30d": 2, "lastCalledAt": "2026-10-07T01:24:57.39Z" }, "metadata": { "serviceName": "Vextorium", "extensions": { "bazaar": { "info": { "input": { "body": { "dias": 14, "limite": 2 }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "catalogo": "2026.10.02", "coincidencias": 17, "fuente": "CISA Known Exploited Vulnerabilities (dominio público de EE. UU.)", "total_catalogo": 1733, "vulnerabilidades": [ { "accion": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon…", "alta": "2026-10-02", "cve": "CVE-2026-102490", "cwe": [ "CWE-269" ], "descripcion": "Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.", "fabricante": "Zammad GmbH", "nombre": "Zammad GmbH Zammad Improper Privilege Management Vulnerability", "plazo_correccion": "2026-10-05", "producto": "Zammad", "ransomware": "Unknown" }, { "accion": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon…", "alta": "2026-10-02", "cve": "CVE-2026-102489", "cwe": [ "CWE-384" ], "descripcion": "Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.", "fabricante": "Zammad GmbH", "nombre": "Zammad GmbH Zammad Session Fixation Vulnerability", "plazo_correccion": "2026-10-05", "producto": "Zammad", "ransomware": "Unknown" } ] }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "properties": { "buscar": { "type": "string" }, "dias": { "type": "integer" }, "limite": { "type": "integer" }, "ransomware": { "type": "boolean" } }, "required": [] }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "properties": { "catalogo": { "type": [ "string", "null" ] }, "coincidencias": { "type": [ "number", "null" ] }, "fuente": { "type": [ "string", "null" ] }, "total_catalogo": { "type": [ "number", "null" ] }, "vulnerabilidades": { "items": { "properties": { "accion": { "type": [ "null", "string" ] }, "alta": { "type": [ "null", "string" ] }, "cve": { "type": [ "null", "string" ] }, "cwe": { "items": { "type": [ "null", "string" ] }, "type": [ "array", "null" ] }, "descripcion": { "type": [ "null", "string" ] }, "fabricante": { "type": [ "null", "string" ] }, "nombre": { "type": [ "null", "string" ] }, "plazo_correccion": { "type": [ "null", "string" ] }, "producto": { "type": [ "null", "string" ] }, "ransomware": { "type": [ "null", "string" ] } }, "type": [ "null", "object" ] }, "type": [ "array", "null" ] } }, "type": [ "object", "null" ] }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } } } }, "liveness": { "reliability": null }, "verified": false, "featured": false, "provider": { "host": "api.vextorium.com", "manifest_name": "api.vextorium.com", "source": "cdp-mirror", "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources", "submitted_at": "2026-10-14T01:15:01.050Z" }, "exampleResponse": { "example": { "catalogo": "string", "coincidencias": 0, "fuente": "string", "total_catalogo": 0, "vulnerabilidades": [ { "accion": null, "alta": null, "cve": null, "cwe": [ "value" ], "descripcion": null, "fabricante": null, "nombre": null, "plazo_correccion": null, "producto": null, "ransomware": null } ] }, "type": "string" } }