Type a CVE identifier or a product name to check it against the CISA Known Exploited Vulnerabilities catalog. You get the required remediation action, the federal due date, ransomware association and EPSS likelihood — from public sources VulnTrek mirrors daily.
The checker is read-only, needs no account or API key, and serves public upstream advisory data that VulnTrek mirrors daily.
The CISA-required action and due date, whether the CVE is linked to ransomware campaigns, and the EPSS estimate of exploitation likelihood.
What KEV is, where the data comes from, how often it refreshes and what the checker deliberately does not cover.
An assistant can call the identical corpus through the free threat intel MCP server — no account there either.