Domain name for API request: csip.intl.tencentcloudapi.com.
This API is used to obtain vulnerability list
A maximum of 20 requests can be initiated per second for this API.
The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.
| Parameter Name | Required | Type | Description |
|---|---|---|---|
| Action | Yes | String | Common Params. The value used for this API: DescribeVulItemList. |
| Version | Yes | String | Common Params. The value used for this API: 2022-11-21. |
| Region | No | String | Common Params. This parameter is not required. |
| Filters.N | No | Array of Filters | Filter condition array. Multi-condition with each other is AND relationship |
| Limit | No | Integer | Number of results per page |
| Offset | No | Integer | Paging offset |
| Order | No | String | Sorting order |
| By | No | String | Sorting field |
| Parameter Name | Type | Description |
|---|---|---|
| List | Array of VulDetailInfo | Vulnerability entry list |
| TotalCount | Integer | Total number of secrets. |
| RequestId | String | The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem. |
Retrieve the vulnerability detection item list
POST / HTTP/1.1
Host: csip.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: DescribeVulItemList
<Common request parameters>
{
"Limit": 10,
"Offset": 0,
"Order": "desc",
"By": "PublishTime"
}{
"Response": {
"List": [
{
"AffectProduct": [],
"AffectVendor": [],
"CVEID": "CVE-2026-8863",
"CVSSLevel": "HIGH",
"Category": "WINDOWS",
"CheckMethod": "VersionCompare",
"CvssScore": 7.8,
"DefendHostCount": 0,
"DefendStatus": "NOT_ENABLED",
"EPSSScore": 0,
"FixSolution": "1. Edition upgrade: Microsoft has released a security update to fix the vulnerability. Assess business impact and install the official Windows security patch as soon as possible to fix the UEFI Secure Boot protection mechanism defect."
"ID": 123044,
"KVERecord": false,
"KVERecordTime": "",
"Label": [],
"LatestScanTime": "",
"LatestTrend": [],
"Mechanism": "",
"Name": "Microsoft UEFI SHIM Secure Boot Bypass Vulnerability (CVE-2026-8863)"
"NotDefendHostCount": 0,
"Precondition": "",
"PublishTime": "2026-06-10 02:10:15",
"RefLink": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8863,https://kb.cert.org/vuls/id/616257,https://nvd.nist.gov/vuln/detail/CVE-2026-8863,https://vuldb.com/vuln/369783,https://www.tenable.com/blog/microsofts-june-2026-patch-tuesday-addresses-198-cves-cve-2026-49160-cve-2026-50507,https://www.kb.cert.org/vuls/id/616257,https://github.com/advisories/GHSA-4hqv-6cp5-4rq9,https://exchange.xforce.ibmcloud.com/vulnerabilities/YX3srZ4BC7vCu9U8jfyM,https://www.wiz.io/vulnerability-database/cve/cve-2026-8863,https://msrc.microsoft.com/update-guide/en-us/vulnerability/CVE-2026-8863,https://www.tenable.com/cve/CVE-2026-8863",
"Remark": "",
"Summary": "Multiple Microsoft-signed UEFI SHIM boot loaders have Secure Boot bypass vulnerabilities. Attackers with administrator permission or who can modify the boot process can leverage these vulnerable SHIM boot loaders to bypass Secure Boot protection and run arbitrary code before the operating system loads. Specific UEFI DBX (ban list) updates must be applied to prevent these vulnerable boot loaders."
"SupportFix": false,
"VRPRatingInfo": {
"Remark": "",
"Result": "",
"Stage": []
},
"VulAffect": []
}
],
"TotalCount": 70080,
"RequestId": "2589e236-89fa-4379-882a-d5e675c2e8f7"
}
}TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.
There is no error code related to the API business logic. For other error codes, please see Common Error Codes.
Esta página foi útil?
Você também pode entrar em contato com a Equipe de vendas ou Enviar um tíquete em caso de ajuda.
comentários