cvegen
drybrush poster for september 2026, painted from 14,934 published cves

about

cvegen paints every cve published in a month into one poster, one month at a time since january 2025.

a cve is the public id a software flaw gets when it is disclosed. in 2025 about 4,013 came out a month. in september 2026 it was 14,934. a chart says that in a second and is forgotten as fast. a poster for each month lets the change be seen from across a room.

colophon

made by
dmytro. corrections and questions are welcome there.
use
download any poster at print size and use it however you like. cvegen sells nothing.
new posters
a month's poster is final once the month closes. follow along with the rss feed.
built with
plain javascript on a canvas, no drawing libraries. set in geist and paper mono. data from the cve list and cisa, see data.
inspired by
gencup, the world cup posters zeh fernandes draws from the data of every match.