Nutter Tools
Nutter Tools

A free toolbox that runs in your browser. A tool for every job.

Your files never leave your device

Images

  • Convert images
  • Compress images
  • Resize images
  • Crop
  • Watermark

PDF & files

  • Merge PDFs
  • Split a PDF
  • Images to PDF
  • PDF to images
  • Remove photo location

Video & audio

  • Compress video
  • Convert video
  • Video to GIF
  • Convert audio
  • Trim audio

Everyday

  • QR codes
  • Passwords
  • Time zones
  • Unit converter
  • Word count
  • Webcam test

Developer

  • JSON formatter
  • Base64
  • Regex tester
  • Hashes
  • JWT decoder

Site

  • About
  • Contact
  • Settings
  • Privacy
  • Terms
  • Site map
  • llms.txt

Everyday

  • Images
  • Video
  • Audio
  • PDF & files
  • Text
  • QR codes
  • Units & math
  • Time & dates
  • Color
  • Passwords & IDs
  • Device tests
  • Sun & moon

For developers

  • JSON
  • Encoding
  • Regex & cron
  • Web & auth
  • Hashing & encryption
  • Config files
  • Network
  • Browser
  • AI
  • Fake data
© Nutter Toolsnutter.tools
  1. Home
  2. Network
  3. CISA KEV lookup
Your files stay on your device

CISA KEV lookup

Match CVE ids against a dated snapshot of CISA's Known Exploited Vulnerabilities catalogue: action, due date, ransomware use.

This tool is in beta

Still being tested. If a result looks wrong, tell us.

Report a problem

Snapshot 2026-10-30 (catalogue version 2026.10.30): 95 of 1766 catalogue rows bundled. The live catalogue lives at cisa.gov/known-exploited-vulnerabilities-catalog.

CISA decides membership; this tool reads it

Each id is matched against the bundled snapshot of CISA's Known Exploited Vulnerabilities catalogue. Listed rows carry CISA's required action, due date, and ransomware field exactly as published.

The catalogue is bundled as a dated snapshot taken from CISA's official feed on 2026-10-30, holding a curated subset of the 1766 rows that day's full catalogue carried, so a fresh id can be missing here while it sits in CISA's catalogue right now. The snapshot date appears on every verdict for exactly that reason. Overdue is judged against your device clock at run time. This is a lookup, not a scanner: nothing here tests your systems, and the remediation text is quoted as CISA wrote it.

Mode and input

Mode
Up to 500 per run, one per line or comma separated

Paste a whole report if you like: every CVE id in the text is picked out and matched against the bundled snapshot, in this tab, with no network request.

Runs on this device. Nothing is uploaded.

More network tools

  • CloudTrail analyzer
All network tools

Was this tool useful?