curl --request POST \
  --url https://api.altostrat.io/scans/cve/mac-address/cves \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "mac_addresses": [
    "00:1A:2B:3C:4D:5E",
    "08:00:27:7C:2E:5A"
  ]
}'

{
  "mac_addresses": [
    "00:1A:2B:3C:4D:5E"
  ],
  "total_scans": 5,
  "total_cve_instances": 23,
  "total_host_count": 8,
  "mac_stats": {},
  "stats": {
    "unique_cve_count": 15,
    "highest_score": 9.8,
    "average_score": 7.5
  },
  "cves": [
    {
      "id": "9c46d2a1-1234-5678-9abc-def012345678",
      "cve_id": "CVE-2021-44228",
      "description": "Os recursos JNDI do Apache Log4j2 não protegem contra LDAP controlado pelo invasor e outros endpoints relacionados a JNDI.",
      "published_at": "2021-12-10T11:15:00Z",
      "created_at": "2025-10-29T12:10:00Z",
      "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "score": 10,
      "severity": "CRITICAL",
      "scan_id": "9c46a6f1-a8d8-4f5a-9b2f-7d1b3e9c5a1d",
      "compliance_tags": [
        "PCI-DSS",
        "HIPAA",
        "NIST"
      ],
      "host": {
        "id": "9c46d4e5-a1b2-c3d4-e5f6-a1b2c3d4e5f6",
        "hostname": "fileserver.local",
        "mac_address": "00:1A:2B:3C:4D:5E",
        "manufacturer": "Apple, Inc.",
        "ip_address": "192.168.1.101"
      },
      "status": "open",
      "other_occurrences": [
        {
          "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
          "scan_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
          "host_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
          "created_at": "2023-11-07T05:31:56Z"
        }
      ]
    }
  ]
}