CVE feeds tell security teams about new and actively-exploited vulnerabilities. The authoritative sources (NVD and CISA KEV) are free but raw; intelligence vendors add enrichment under subscriptions. Tools differ in how much joining and filtering they do for you.
Tools to consider
An unranked list of common options in this category, described factually. Pricing models change over time — confirm current terms with each provider.
| Tool | Type | Pricing model |
|---|---|---|
| NVD (NIST) | Authoritative CVE source, raw | Free, unstructured |
| CISA KEV | Known Exploited Vulnerabilities catalog | Free |
| Commercial vuln-intel vendors | Enriched feeds + scoring | Subscription |
| NexGenData CVE Monitor (this site) | NVD + CISA KEV joined, filtered JSON | Pay-per-result, $5/mo free credit |
Where the NexGenData actor fits
The NexGenData CVE actor joins NVD with the CISA KEV catalog and returns a filtered, deduplicated feed as JSON — CVE ID, CVSS, severity, affected products, and an exploited flag — on a pay-per-result basis, so you get a usable feed without building the join yourself.
Sample input
{
"minCvss": 7.0,
"onlyKev": false,
"daysBack": 7
}Sample output
{
"cveId": "CVE-2026-12345",
"cvss": 9.8,
"severity": "CRITICAL",
"kevExploited": true,
"published": "2026-06-02"
}Try it
Open the actor on Apify → Pay-per-result, $5/month free credit, no subscription.
Step-by-step guide: read the buyer guide. More tools in the cluster hub.
FAQ
What are NVD and CISA KEV?
NVD is NIST's vulnerability database; CISA KEV lists vulnerabilities known to be exploited.
Why use a tool over the raw feeds?
Tools join and filter the sources into a usable feed.
Can I filter by severity?
Yes — by minimum CVSS and KEV-only.
What does it cost?
Pay-per-result on Apify with $5/month free credit.