# CyberPulse CVE Fact Check

> CyberPulse CVE Fact Check is a paid API for AI agents from cyberpulse.theaslangroupllc.com, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-14).

Deterministically verifies a CVE ID by joining NVD, CISA KEV, and OSV data to answer whether it is real, exploited, how severe, and what version fixes it.

## Facts

- Endpoint: GET https://cyberpulse.theaslangroupllc.com/api/cyber/cve-check
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cyberpulse-cve-fact-check-7ab04159
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_KJKC_zYlSuXfTdFYfySkG

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cyberpulse-cve-fact-check-7ab04159
```

Example prompt: Can you fact-check CVE-2021-44228 for me — is it a real CVE, is it actively exploited in the wild, is it in the CISA KEV catalog, what's its CVSS score, and what version of Log4j fixes it?

## When to prefer this

Choose this endpoint when you need a fast, deterministic, no-hallucination answer about a specific CVE ID — especially to confirm existence, check CISA KEV active-exploitation status, get a canonical CVSS score, or find the exact fixed package version per ecosystem. Prefer this over LLM-based CVE summaries when accuracy and source traceability matter. Use this instead of the sibling CVE lookup brief endpoint when you want raw structured data rather than a narrative brief.

## Known failure modes

- CVE ID format invalid — returns structured error indicating bad input
- CVE ID not found in NVD, CISA KEV, or OSV — returns explicit 'not a known CVE' status (not a false not-found)
- Upstream NVD or OSV registry temporarily unreachable — returns 'registry unreachable' status rather than false not-found
- Malformed CVE ID (e.g. missing year or sequence) — returns validation error
- Rate limit or payment failure — returns 402 or 429 error

## How this service works

CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively-exploited flag, remediation due date, ransomware use), and OSV (affected packages + fixed versions per ecosystem). No LLM. Distinguishes "not a known CVE" from "registry unreachable" — never a false not-found.

## Output

Returns a structured record confirming whether the CVE ID exists, its CVSS score and vector string, publication and modification dates, whether it appears in the CISA KEV catalog with remediation due date and ransomware association flag, and a list of affected packages with fixed versions per ecosystem sourced from OSV. Distinguishes 'CVE not found in any registry' from 'registry temporarily unreachable' to prevent false negatives.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "id"
 ],
 "properties": {
  "id": {
   "type": "string",
   "description": "CVE identifier"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "id": "CVE-2021-44228",
  "cvss": {
   "score": 10,
   "severity": "CRITICAL"
  },
  "fixes": [
   {
    "fixed": "2.15.0",
    "package": "org.apache.logging.log4j:log4j-core",
    "ecosystem": "Maven"
   }
  ],
  "found": true,
  "deterministic": true,
  "exploited_in_wild": {
   "listed": true,
   "date_added": "2021-12-10",
   "known_ransomware_use": "Known"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cyberpulse-cve-fact-check-7ab04159/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cyberpulse.theaslangroupllc.com](https://www.zero.xyz/host/cyberpulse.theaslangroupllc.com/llms.txt)