API Documentation

Programmatic access to the CyberRota CVE database

No Authentication

No API key required, free to use

CORS Enabled

All endpoints return Access-Control-Allow-Origin: *

JSON Responses

application/json; charset=utf-8 (CSV export available)

Base URL

https://cyberrota.com

GET /api/stats

Database totals and severity breakdown.

{
  "Total": 372889,
  "Critical": 45230,
  "High": 132110,
  "Medium": 158920,
  "Low": 36629
}

GET /api/cves

Filtered, paginated CVE list. Also available as CSV.

Param	Type	Default	Description
q	string	—	Free-text search (CVE ID or description)
severity	string	—	CRITICAL, HIGH, MEDIUM, LOW
days	int	0	Published within the last N days (0 = all time)
sort	string	modified	modified, published, cvss, epss
kev	int	0	Only CISA KEV entries: kev=1
epss_min	float	0	Minimum EPSS score, 0–100 (percent)
date_from	string	—	Start date, YYYY-MM-DD
date_to	string	—	End date, YYYY-MM-DD
page	int	1	Page number
limit	int	50	Results per page (max 200; 5000 for CSV)
format	string	json	format=csv to download as CSV

Example Requests

/api/cves?severity=CRITICAL&days=30&limit=10 /api/cves?kev=1&sort=epss&limit=50 /api/cves?q=apache&format=csv&limit=5000

{
  "total": 45230,
  "page": 1,
  "limit": 50,
  "results": [
    {
      "cve_id": "CVE-2026-12345",
      "published": "2026-08-01T00:00:00.000",
      "last_modified": "2026-08-04T06:08:29.451Z",
      "description": "A critical vulnerability in...",
      "cvss_score": 9.8,
      "severity": "CRITICAL",
      "cwe_id": "CWE-89",
      "epss_score": 0.9421,
      "is_kev": true,
      "public_exploit": false
    }
  ]
}

GET /api/cve/{id}

Full record for a single CVE, including exploit and KEV enrichment.

/api/cve/CVE-2026-12345

200 Found 404 CVE not found

GET /api/cwe/{id}

CVEs in a given CWE weakness category. Supports page and limit (max 200).

/api/cwe/CWE-79?limit=100 /api/cwe/CWE-89?page=2&limit=50

GET /api/vendor/{name}

CVEs affecting a given vendor, matched from NVD CPE data. Lowercase vendor name.

/api/vendor/microsoft /api/vendor/apache?limit=100&page=1

Other Endpoints

GET

/feed.xml

RSS 2.0 feed of the 50 most recently updated CVEs.

GET

/sitemap.xml

Sitemap index covering every CVE detail page.

No rate limit is currently enforced. Please use the API responsibly — use page and limit for bulk access instead of scraping.