Home Embedded Vulns General Vulns

ESV-Tracker

An AI-powered database that classifies embedded vulnerabilities separately from general-purpose ones.

No Dedicated Database Existed. Until Now.

Embedded system vulnerabilities are critical, yet buried alongside millions of general CVEs. ESV-Tracker changes that.

Your Embedded Threat Center.

Search the database, track embedded CVEs, and explore real-time statistics — all in one place.

4600
New Embedded Vulns (7 Days)
10498
Active Critical ESVs
jetbrains
Top Target (30 Days)
6.92
Average ESV CVSS Score

Vulnerability Trends (Last 6 Months)

ESV Severity Distribution (90 Days)

Top Affected ESV Vendors (90 Days)

  • google 129 Vulns
  • dell 48 Vulns
  • microsoft 27 Vulns
  • apple 10 Vulns
  • jetbrains 7 Vulns

Recent Critical ESVs

CVE-2026-111998 CRITICAL 9.8
CVE-2026-110372 CRITICAL 9.8
CVE-2026-111911 CRITICAL 9.8
CVE-2026-110653 CRITICAL 9.1
CVE-2026-111823 CRITICAL 9.8

Recently Added Vulnerabilities

CVE ID Description Severity Published Type
CVE-2026-101309 The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. The size was re-read… High (7.0) 2026-10-15 Environment Specific
CVE-2026-96537 The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its mana… High (7.5) 2026-10-15 Environment Specific
CVE-2026-92429 The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webho… Medium (5.3) 2026-10-15 Environment Specific
CVE-2026-92428 The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webho… Medium (5.3) 2026-10-15 General Purpose
CVE-2026-81534 The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up t… High (8.8) 2026-10-15 Environment Specific