Home Embedded Vulns General Vulns

ESV-Tracker

An AI-powered database that classifies embedded vulnerabilities separately from general-purpose ones.

No Dedicated Database Existed. Until Now.

Embedded system vulnerabilities are critical, yet buried alongside millions of general CVEs. ESV-Tracker changes that.

Your Embedded Threat Center.

Search the database, track embedded CVEs, and explore real-time statistics — all in one place.

4057
New Embedded Vulns (7 Days)
10515
Active Critical ESVs
jetbrains
Top Target (30 Days)
6.92
Average ESV CVSS Score

Vulnerability Trends (Last 6 Months)

ESV Severity Distribution (90 Days)

Top Affected ESV Vendors (90 Days)

  • google 129 Vulns
  • dell 48 Vulns
  • microsoft 27 Vulns
  • apple 10 Vulns
  • jetbrains 7 Vulns

Recent Critical ESVs

CVE-2026-112371 CRITICAL 9.9
CVE-2026-112370 CRITICAL 9.9
CVE-2026-112779 CRITICAL 9.8
CVE-2026-112776 CRITICAL 9.8
CVE-2026-109437 CRITICAL 9.8

Recently Added Vulnerabilities

CVE ID Description Severity Published Type
CVE-2020-5726 The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A re… High (7.5) 2020-03-30 Environment Specific
CVE-2020-5725 The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endp… Medium (5.9) 2020-03-30 Environment Specific
CVE-2020-5724 The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endp… High (7.5) 2020-03-30 Environment Specific
CVE-2020-5723 The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an att… Critical (9.8) 2020-03-30 Environment Specific
CVE-2020-5275 In symfony/security-http before versions 4.4.7 and 5.0.7, when a `Firewall` checks access control rule, it iterate over… High (7.6) 2020-03-30 General Purpose