Exploits

Catalogued public exploit modules — metadata only.

GET/api/v1/cves/{cveId}/exploits

Catalogued public exploit modules linked to the CVE — Metasploit modules, Exploit-DB entries, Nuclei templates — with authorship, platform, publication date, and module metadata.

The API serves metadata only, never exploit source code; source_url points at the upstream module for callers with a legitimate need.

Parameters

Name	In	Type	Description
`cveId`	path	string	CVE identifier.

Example request

curl "https://radicalnotion.ai/api/v1/cves/CVE-2025-55182/exploits" \
  -H "Authorization: Bearer $RN_TOKEN"

Example response(trimmed to two modules for brevity)

{
  "cve_id": "CVE-2025-55182",
  "count": 2,
  "exploits": [
    {
      "source": "exploitdb",
      "source_id": "52506",
      "name": "React Server 19.2.0 - Remote Code Execution",
      "description": "React Server 19.2.0 - Remote Code Execution",
      "authors": [
        "danieljavanrad"
      ],
      "platform": [
        "multiple"
      ],
      "date_published": "2026-04-09",
      "source_url": "https://www.exploit-db.com/exploits/52506",
      "module_type": null,
      "module_class": null,
      "verified": false,
      "exploit_rank": null
    },
    {
      "source": "metasploit",
      "source_id": "modules/exploits/multi/http/react2shell_unauth_rce_cve_2025_55182.rb",
      "name": "Unauthenticated RCE in React Server Components (React2Shell)",
      "description": "A critical unauthenticated Remote Code Execution (RCE) vulnerability exists in React Server Components (RSC) Flight protocol. The vulnerability allows attackers to achieve prototype pollution during deserialization of RSC payloads by sending specially crafted multipart requests with \"__proto__\", \"constructor\", or \"prototype\" as module names.  This module supports multiple vulnerable frameworks including Next.js and Waku.",
      "authors": [
        "Maksim Rogov"
      ],
      "platform": null,
      "date_published": "2025-12-03",
      "source_url": null,
      "module_type": "exploit",
      "module_class": "Msf::Exploit::Remote",
      "verified": null,
      "exploit_rank": "Excellent"
    }
  ]
}

Response schema

Field	Type	Description
`exploits[].source`	string	Catalog the module came from (metasploit, exploitdb, nuclei, ...).
`exploits[].source_id`	string \| null	Module path or id within its catalog.
`exploits[].name / description`	string \| null	Module title and description.
`exploits[].authors`	string[] \| null	Credited authors.
`exploits[].platform`	string \| null	Target platform.
`exploits[].date_published`	string \| null	Module publication date.
`exploits[].source_url`	string \| null	Upstream URL of the module.
`exploits[].module_type / module_class / exploit_rank / verified`	string \| boolean \| null	Catalog-specific metadata (Metasploit rank, EDB verification, ...).

Responses

Status	Meaning
`200`	Success.
`400`	A path or query parameter failed validation.
`401`	Missing or invalid access token.
`403`	The CVE is outside your access tier.
`404`	No record exists for the CVE.
`429`	Rate limit exceeded.

A CVE with no catalogued public exploits returns count 0.

Empty result (200)

{
  "cve_id": "CVE-2025-55182",
  "count": 0,
  "exploits": []
}

Name

Type

Description

cveId

path

string

CVE identifier.

Example response(trimmed to two modules for brevity)

{
  "cve_id": "CVE-2025-55182",
  "count": 2,
  "exploits": [
    {
      "source": "exploitdb",
      "source_id": "52506",
      "name": "React Server 19.2.0 - Remote Code Execution",
      "description": "React Server 19.2.0 - Remote Code Execution",
      "authors": [
        "danieljavanrad"
      ],
      "platform": [
        "multiple"
      ],
      "date_published": "2026-04-09",
      "source_url": "https://www.exploit-db.com/exploits/52506",
      "module_type": null,
      "module_class": null,
      "verified": false,
      "exploit_rank": null
    },
    {
      "source": "metasploit",
      "source_id": "modules/exploits/multi/http/react2shell_unauth_rce_cve_2025_55182.rb",
      "name": "Unauthenticated RCE in React Server Components (React2Shell)",
      "description": "A critical unauthenticated Remote Code Execution (RCE) vulnerability exists in React Server Components (RSC) Flight protocol. The vulnerability allows attackers to achieve prototype pollution during deserialization of RSC payloads by sending specially crafted multipart requests with \"__proto__\", \"constructor\", or \"prototype\" as module names.  This module supports multiple vulnerable frameworks including Next.js and Waku.",
      "authors": [
        "Maksim Rogov"
      ],
      "platform": null,
      "date_published": "2025-12-03",
      "source_url": null,
      "module_type": "exploit",
      "module_class": "Msf::Exploit::Remote",
      "verified": null,
      "exploit_rank": "Excellent"
    }
  ]
}

Response schema

Field	Type	Description
`exploits[].source`	string	Catalog the module came from (metasploit, exploitdb, nuclei, ...).
`exploits[].source_id`	string \| null	Module path or id within its catalog.
`exploits[].name / description`	string \| null	Module title and description.
`exploits[].authors`	string[] \| null	Credited authors.
`exploits[].platform`	string \| null	Target platform.
`exploits[].date_published`	string \| null	Module publication date.
`exploits[].source_url`	string \| null	Upstream URL of the module.
`exploits[].module_type / module_class / exploit_rank / verified`	string \| boolean \| null	Catalog-specific metadata (Metasploit rank, EDB verification, ...).

Responses

Status	Meaning
`200`	Success.
`400`	A path or query parameter failed validation.
`401`	Missing or invalid access token.
`403`	The CVE is outside your access tier.
`404`	No record exists for the CVE.
`429`	Rate limit exceeded.

A CVE with no catalogued public exploits returns count 0.

Empty result (200)

{
  "cve_id": "CVE-2025-55182",
  "count": 0,
  "exploits": []
}