# CyberPulse CVE Deep-Dive Brief

> CyberPulse CVE Deep-Dive Brief is a paid API for AI agents from cyberpulse-six.vercel.app, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-15).

Returns a comprehensive security brief for a specific CVE including CVSS score, affected products, exploitation status, patch status, and remediation steps from NVD and CISA data.

## Facts

- Endpoint: GET https://cyberpulse-six.vercel.app/api/cyber/cve-brief
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cyberpulse-cve-deep-dive-brief-de147d42
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_-QsnoEB20cZHNW1J9cwwY

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cyberpulse-cve-deep-dive-brief-de147d42
```

Example prompt: Give me a full deep-dive brief on CVE-2021-44228 — I need the CVSS score, which products are affected, whether it's in the CISA KEV list, if there's an active exploit or PoC out there, and what remediation steps we should take.

## When to prefer this

Use this endpoint when you need a single, comprehensive security brief for one specific CVE, combining CVSS scoring, product impact, exploitation intelligence (KEV, active exploitation, PoC), and remediation guidance in one call. Prefer this over the product-CVE listing endpoint when you already have a CVE ID and need full depth rather than breadth.

## Known failure modes

- CVE ID not found in NVD — returns 404 or empty result
- Invalid CVE format supplied — may return validation error
- CVE too recent to have full NVD enrichment — returns partial data
- Payment of 0.1 USDC not processed — returns 402 Payment Required
- Upstream NVD or CISA API unavailable — returns 503 or timeout

## How this service works

CVE lookup and severity brief for any CVE ID — CVSS score, exploit / CISA KEV / active-exploitation / PoC status, affected products, patch urgency, and remediation steps. Authoritative NVD + CISA data plus threat-intel context, for security and vuln-management agents.

## Output

A structured security brief containing: CVSS score and severity rating, list of affected products and versions, exploitation status flags (CISA KEV membership, active exploitation in the wild, availability of proof-of-concept code), current patch/fix availability status, and actionable remediation steps — all sourced from authoritative NVD and CISA data.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "cve": {
       "type": "string",
       "description": "CVE ID — e.g. \"CVE-2024-3400\" | \"CVE-2023-44487\" | \"CVE-2021-44228\" | \"CVE-2024-21762\""
      },
      "lang": {
       "type": "string",
       "description": "en | es | fr | de | ja | zh | ko | pt | ar | hi (default: en)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "errors": {
     "type": "object",
     "description": "Documented error responses, keyed by HTTP status code",
     "additionalProperties": {
      "type": "object",
      "required": [
       "description"
      ],
      "properties": {
       "example": {
        "type": "object"
       },
       "description": {
        "type": "string"
       }
      }
     }
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "cvss": {
   "score": 10,
   "severity": "CRITICAL",
   "exploitability": "Network-accessible, unauthenticated"
  },
  "title": "PAN-OS Command Injection in GlobalProtect",
  "cve_id": "CVE-2024-3400",
  "patch_status": {
   "patch_urgency": "IMMEDIATE (≤24h)",
   "patch_available": true
  },
  "affected_sectors": [
   "Government",
   "Finance",
   "Healthcare",
   "Any org using Palo Alto GlobalProtect"
  ],
  "executive_summary": "A critical unauthenticated command injection in Palo Alto Networks GlobalProtect is actively exploited. Patch immediately or disable GlobalProtect until patched.",
  "exploitation_status": {
   "in_cisa_kev": true,
   "ransomware_linked": false,
   "exploit_code_public": true,
   "known_exploited_in_wild": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cyberpulse-cve-deep-dive-brief-de147d42/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cyberpulse-six.vercel.app](https://www.zero.xyz/host/cyberpulse-six.vercel.app/llms.txt)