0
New Embedded Vulns (7 Days)
326
Active Critical ESVs
qnap
Top Target (30 Days)
6.96
Average ESV CVSS Score
Vulnerability Trends (Last 6 Months)
ESV Severity Distribution (90 Days)
Top Affected ESV Vendors (90 Days)
- apple 136 Vulns
- tenda 90 Vulns
- samsung 52 Vulns
- dlink 44 Vulns
- ruijie 35 Vulns
Recent Critical ESVs
CVE-2026-20750
CRITICAL 9.1
CVE-2026-23800
CRITICAL 10.0
CVE-2026-23523
CRITICAL 9.6
CVE-2025-62582
CRITICAL 9.8
CVE-2025-62581
CRITICAL 9.8
Recently Added Vulnerabilities
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2025-65236 | OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID … | Critical (9.8) | 2025-11-26 | General-Purpose |
| CVE-2025-65235 | OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via… | Critical (9.8) | 2025-11-26 | Embedded |
| CVE-2025-63938 | Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port() function within src/reqs… | Medium (6.5) | 2025-11-26 | General-Purpose |
| CVE-2025-46175 | Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataScope permission check in the a… | High (7.5) | 2025-11-26 | General-Purpose |
| CVE-2025-62354 | Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorize… | Critical (9.8) | 2025-11-26 | General-Purpose |