Home Embedded Vulns General Vulns

ESV-Tracker

An AI-powered database that classifies embedded vulnerabilities separately from general-purpose ones.

No Dedicated Database Existed. Until Now.

Embedded system vulnerabilities are critical, yet buried alongside millions of general CVEs. ESV-Tracker changes that.

Your Embedded Threat Center.

Search the database, track embedded CVEs, and explore real-time statistics — all in one place.

3952
New Embedded Vulns (7 Days)
10615
Active Critical ESVs
jetbrains
Top Target (30 Days)
6.92
Average ESV CVSS Score

Vulnerability Trends (Last 6 Months)

ESV Severity Distribution (90 Days)

Top Affected ESV Vendors (90 Days)

  • google 129 Vulns
  • dell 48 Vulns
  • microsoft 27 Vulns
  • apple 10 Vulns
  • jetbrains 7 Vulns

Recent Critical ESVs

CVE-2026-92559 CRITICAL 9.8
CVE-2026-91665 CRITICAL 9.8
CVE-2026-91663 CRITICAL 9.9
CVE-2026-91658 CRITICAL 9.9
CVE-2026-91655 CRITICAL 9.1

Recently Added Vulnerabilities

CVE ID Description Severity Published Type
CVE-2026-97204 Deleting a label compared the ID of the repository in the request against the organization ID of organization labels, a… Unknown 2026-10-18 Environment Specific
CVE-2026-110494 Adding attachments to a release checked the repository and release of an attachment but not whether it was already link… Unknown 2026-10-18 Environment Specific
CVE-2026-110324 The visibility check of Gitea user profiles was applied to GET requests only, while `POST /{username}` (follow and unfo… Unknown 2026-10-18 Environment Specific
CVE-2026-110311 Creating a draft release through the API returned an `assets` list that was built from a release without an ID, which m… Unknown 2026-10-18 Environment Specific
CVE-2026-109844 `GET /api/v1/user/subscriptions` returned the metadata of every repository a user was watching without checking that th… Unknown 2026-10-18 Environment Specific