Home Embedded Vulns General Vulns

ESV-Tracker

An AI-powered database that classifies embedded vulnerabilities separately from general-purpose ones.

No Dedicated Database Existed. Until Now.

Embedded system vulnerabilities are critical, yet buried alongside millions of general CVEs. ESV-Tracker changes that.

Your Embedded Threat Center.

Search the database, track embedded CVEs, and explore real-time statistics — all in one place.

3766
New Embedded Vulns (7 Days)
10635
Active Critical ESVs
jetbrains
Top Target (30 Days)
6.92
Average ESV CVSS Score

Vulnerability Trends (Last 6 Months)

ESV Severity Distribution (90 Days)

Top Affected ESV Vendors (90 Days)

  • google 129 Vulns
  • dell 48 Vulns
  • microsoft 27 Vulns
  • apple 10 Vulns
  • jetbrains 7 Vulns

Recent Critical ESVs

CVE-2026-91403 CRITICAL 9.1
CVE-2026-114383 CRITICAL 10.0
CVE-2026-114382 CRITICAL 10.0
CVE-2026-96639 CRITICAL 9.8
CVE-2026-111815 CRITICAL 10.0

Recently Added Vulnerabilities

CVE ID Description Severity Published Type
CVE-2026-94294 The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-… Medium (5.3) 2026-10-19 Environment Specific
CVE-2026-94272 The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status c… Medium (5.3) 2026-10-19 General Purpose
CVE-2026-94231 The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, … Medium (5.3) 2026-10-19 Environment Specific
CVE-2026-94230 The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does n… Medium (5.3) 2026-10-19 Environment Specific
CVE-2026-94229 The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its con… Medium (5.3) 2026-10-19 Environment Specific