BountyHub Docs
CVE Watcher
Track CISA KEV known exploited vulnerabilities with NVD and EPSS enrichment, exploit-signal tiers, a queryable feed, and push alerts.
CVE Watcher
CVE Watcher is BountyHub's built-in feed of known exploited vulnerabilities — CVEs with evidence that attackers are already using them, not just CVEs with a high severity score. It starts from CISA's Known Exploited Vulnerabilities (KEV) catalog and enriches each entry with NVD and FIRST EPSS data, so the feed answers the questions that decide what you patch first:
- Is this being exploited in the wild?
- How bad is it if it is?
- How likely is exploitation, even before CISA confirms it?
- What is the remediation deadline?
Open CVE Watcher from the Hub navigation, or start with the CVE Watcher overview.
| Page | What it covers |
|---|---|
| Overview | Data sources, feed columns, severity and exploit tiers, the publish pipeline, cadence, and plans. |
| Search and filters | The query language used by the feed and the search API field. |
| Push notifications | Channel setup, delivery rules, and troubleshooting. |
| API and scopes | CveWatcherService RPCs, message fields, pagination, and PAT scopes. |
The feed is readable on every plan. Push notifications require a paid plan.