API Reference

List High-EPSS CVEs

Return CVEs whose EPSS exploit-probability score meets or exceeds a minimum threshold, sorted by EPSS score descending. Use it to surface the CVEs most likely to be exploited in the wild right now.

GET

/v1/cve/high-epss

Cost: 1 credit per successful call

Query parameters

min_epssnumberoptionaldefault 0.5

Minimum EPSS score. Higher values narrow the result to CVEs with the greatest exploitation likelihood. Accepted range: 0–1.

limitintegeroptionaldefault 50

Maximum number of CVEs to return. Accepted range: 1–200.

Request

curl "https://api.edgeprotect.io/functions/v1/cve/high-epss?min_epss=0.9&limit=20" \
  -H "Authorization: Bearer $EDGEPROTECT_API_KEY"

Response

{
  "data": {
    "count": 20,
    "min_epss": 0.9,
    "limit": 20,
    "items": [
      {
        "cve_id": "CVE-2024-3094",
        "epss": 0.97531,
        "percentile": 0.99986,
        "delta": 0.00012,
        "updated_at": "2026-05-28T00:00:00Z"
      },
      {
        "cve_id": "CVE-2021-44228",
        "epss": 0.97527,
        "percentile": 0.99985,
        "delta": -0.00003,
        "updated_at": "2026-05-28T00:00:00Z"
      }
    ],
    "generated_at": "2026-05-29T09:15:44.221Z"
  },
  "meta": {
    "request_id": "8b16efb8-9a6c-4ace-b817-11cbee626d08",
    "generated_at": "2026-05-18T10:24:31.118Z",
    "credits": { "charged": 1, "remaining": 9998 }
  }
}

Response fields

data.countintegeroptional

Number of CVEs returned (equals items.length).

data.min_epssnumberoptional

The minimum EPSS threshold applied to this request.

data.limitintegeroptional

The maximum number of CVEs requested.

data.itemsarrayoptional

CVEs at or above the threshold, sorted by EPSS score descending. Each object contains the fields below.

data.items[].cve_idstringoptional

CVE identifier for the vulnerability.

data.items[].epssnumberoptional

Current EPSS score: the probability (0.0–1.0) the CVE will be exploited in the wild within 30 days.

data.items[].percentilenumberoptional

The EPSS percentile rank among all scored CVEs.

data.items[].deltanumberoptional

The change in EPSS score over the most recent scoring interval.

data.items[].updated_atstringoptional

ISO 8601 timestamp of the most recent EPSS update for this CVE.

data.generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

Status	`error`	When
400	`invalid_min_epss`, `invalid_limit`	A parameter failed validation.
401	`invalid_authorization`	Missing or malformed `Authorization` header.
401	`unauthorized`	Invalid/revoked key, or IP not allowlisted.
402	`insufficient_credits`	Organisation credit balance is below 1.
404	`not_found`	The route or entity does not exist.
405	`method_not_allowed`	Only `GET` and `OPTIONS` are accepted.
500	`internal`	Unexpected server error (credit auto-refunded).

See Errors for the full error reference.