{"workload_id":"kev_stats","endpoint":"/v1/cyber/kev/stats","live_url":"https://answerpool.io/v1/cyber/kev/stats?days=90","price_usd":0.0,"description":"Aggregates over the CISA KEV catalog: top exploited vendors all-time and recent, additions by month, top CWE weakness types, ransomware share and past-due count. Free, no key.","note":"Static representative sample. Call live_url for current data (x402 USDC or prepaid credit key; free products need no payment).","sample":{"as_of":"2026-09-03T16:00:00Z","catalog_version":"2026.09.02","catalog_size":1694,"window_days":90,"added_in_window":37,"ransomware_linked_total":288,"ransomware_share_pct":17.0,"past_due_total":1602,"top_vendors_all_time":[{"key":"Microsoft","count":331}],"top_vendors_in_window":[{"key":"Cisco","count":6}],"additions_by_month":[{"key":"2026-08","count":12}],"top_cwes":[{"key":"CWE-78","count":61}],"note":"Counts are AnswerPool aggregates over the CISA catalog: which vendors' products are most often found exploited, how additions are trending, and how much of the catalog is ransomware-linked. Counts reflect what CISA has catalogued, which is a floor on real exploitation, not a census.","source":"CISA Known Exploited Vulnerabilities catalog","refresh_after":"2026-09-18T00:00:00.000Z"}}