Home Embedded Vulns General Vulns

ESV-Tracker

An AI-powered database that classifies embedded vulnerabilities separately from general-purpose ones.

No Dedicated Database Existed. Until Now.

Embedded system vulnerabilities are critical, yet buried alongside millions of general CVEs. ESV-Tracker changes that.

Your Embedded Threat Center.

Search the database, track embedded CVEs, and explore real-time statistics — all in one place.

4041
New Embedded Vulns (7 Days)
10435
Active Critical ESVs
jetbrains
Top Target (30 Days)
6.93
Average ESV CVSS Score

Vulnerability Trends (Last 6 Months)

ESV Severity Distribution (90 Days)

Top Affected ESV Vendors (90 Days)

  • google 129 Vulns
  • dell 48 Vulns
  • microsoft 27 Vulns
  • apple 10 Vulns
  • jetbrains 7 Vulns

Recent Critical ESVs

CVE-2026-110862 CRITICAL 9.1
CVE-2026-55684 CRITICAL 9.8
CVE-2026-55683 CRITICAL 9.8
CVE-2026-55680 CRITICAL 9.8
CVE-2026-85714 CRITICAL 9.1

Recently Added Vulnerabilities

CVE ID Description Severity Published Type
CVE-2019-20526 Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp password parameter. Medium (6.1) 2020-03-19 General Purpose
CVE-2019-20525 Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp driver parameter. Medium (6.1) 2020-03-19 General Purpose
CVE-2019-20521 ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/ URI. Medium (6.1) 2020-03-19 General Purpose
CVE-2019-20520 ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI. Medium (6.1) 2020-03-19 General Purpose
CVE-2019-20519 ERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the user/ URI, as demonstrated by a crafted e-mail address. Medium (6.1) 2020-03-19 General Purpose