# CyberPulse CVE Brief

> CyberPulse CVE Brief is a paid API for AI agents from cyberpulse.theaslangroupllc.com, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-15).

Returns a comprehensive vulnerability brief for a given CVE ID, including CVSS score, exploit/CISA KEV/PoC status, affected products, patch urgency, and remediation steps from NVD and CISA data.

## Facts

- Endpoint: GET https://cyberpulse.theaslangroupllc.com/api/cyber/cve-brief
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cyberpulse-cve-brief-18a27952
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_MqWTtUui3NJRVvGxOJjbX

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cyberpulse-cve-brief-18a27952
```

Example prompt: Can you pull the full vulnerability brief for CVE-2024-3400 — I need the CVSS score, whether it's in the CISA KEV list, if there's an active exploit or PoC out there, what products are affected, and what the remediation steps are?

## When to prefer this

Choose this endpoint when you need a complete, authoritative vulnerability profile for a specific known CVE ID — especially when you need CISA KEV status, active exploitation signals, or PoC availability combined with remediation guidance. Prefer this over a general product/software vulnerability scan (which takes a product name as input) when you already have the CVE identifier and need deep enrichment for vuln-management or patching prioritization workflows.

## Known failure modes

- Invalid or malformed CVE ID returns a 400 error
- CVE ID not found in NVD database returns a 404 or empty result
- NVD or CISA data source temporarily unavailable causes a 503
- Rate limiting or payment failure returns a 402 or 429
- Very recently published CVEs may have incomplete data before NVD analysis is finalized

## How this service works

CVE lookup and severity brief for any CVE ID — CVSS score, exploit / CISA KEV / active-exploitation / PoC status, affected products, patch urgency, and remediation steps. Authoritative NVD + CISA data plus threat-intel context, for security and vuln-management agents.

## Output

A structured vulnerability brief containing: CVSS base score and severity rating, exploit status flags (CISA KEV inclusion, active exploitation in the wild, PoC availability), list of affected products and versions, patch urgency level, and concrete remediation/mitigation steps — all sourced from NVD and CISA with additional threat-intel context.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "cve": {
       "type": "string",
       "description": "CVE ID — e.g. \"CVE-2024-3400\" | \"CVE-2023-44487\" | \"CVE-2021-44228\" | \"CVE-2024-21762\""
      },
      "lang": {
       "type": "string",
       "description": "en | es | fr | de | ja | zh | ko | pt | ar | hi (default: en)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "errors": {
     "type": "object",
     "description": "Documented error responses, keyed by HTTP status code",
     "additionalProperties": {
      "type": "object",
      "required": [
       "description"
      ],
      "properties": {
       "example": {
        "type": "object"
       },
       "description": {
        "type": "string"
       }
      }
     }
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "cvss": {
   "score": 10,
   "severity": "CRITICAL",
   "exploitability": "Network-accessible, unauthenticated"
  },
  "title": "PAN-OS Command Injection in GlobalProtect",
  "cve_id": "CVE-2024-3400",
  "patch_status": {
   "patch_urgency": "IMMEDIATE (≤24h)",
   "patch_available": true
  },
  "affected_sectors": [
   "Government",
   "Finance",
   "Healthcare",
   "Any org using Palo Alto GlobalProtect"
  ],
  "executive_summary": "A critical unauthenticated command injection in Palo Alto Networks GlobalProtect is actively exploited. Patch immediately or disable GlobalProtect until patched.",
  "exploitation_status": {
   "in_cisa_kev": true,
   "ransomware_linked": false,
   "exploit_code_public": true,
   "known_exploited_in_wild": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cyberpulse-cve-brief-18a27952/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cyberpulse.theaslangroupllc.com](https://www.zero.xyz/host/cyberpulse.theaslangroupllc.com/llms.txt)