First screen, captured 2 days ago. Hover to scroll the page, or open the video.

CVE Tracker

What HN thinks

The CVE chart goes up and to the right, and so does everyone's blood pressure.

CVE counts are inflated by process
Many argue the surge reflects lowered filing bars, new CNAs like GitHub and the Linux kernel assigning CVEs liberally, and trivial or mis-scored reports rather than real risk growth.
AI is genuinely finding more bugs
Others credit AI tools with uncovering real vulnerabilities in decades of human code, while debating whether AI-written code inherits the same flaws.
CVE/CVSS system is broken
Commenters criticise CVSS severities as incomparable, NIST backlogs and US funding politics, calling for a more robust global system.

Consensus: Most agree the raw numbers need careful interpretation because the way CVEs are assigned changed around 2024, though many still think the increase is partly real.

Recommended in the comments

Tornado ↗ (tool): Suggested as a preferred, unique way to visualize the CVE flood.
CRACI CVE Publication Trends ↗ (service): Offers the severity filter the tracker lacked, showing critical CVEs rising faster.

Summarised by Claude from the comment thread 2 days ago.

Points: 204
Comments: 71
Best rank: #3
Posted: 2026-10-23 by Group_B
Category: Security

cve vulnerabilities data-visualization cvelist vulnerability-tracking

All captures:

Full page

Captured 2 days ago. Click for the whole screenshot.

Looks similar

Screenshot of pwn.watch: What’s getting pwned right now

What’s getting pwned right now (pwn.watch)

353 points by mrkd 4 days ago | 165 comments

pwn.watch is a live feed of ongoing security incidents and CVEs, listing affected software, patch status, fixed versions, and source advisories.

vulnerability-tracker cve security-incidents supply-chain

Screenshot of zsync.xyz: Show HN: Zsync, a Reddit Alternative with the Goal to Reward Quality Comments

Show HN: Zsync, a Reddit Alternative with the Goal to Reward Quality Comments (zsync.xyz)

183 points by JSavageOne 3 years ago | 101 comments

Screenshot of hn-ph.vercel.app: Show HN: Viral Potential Predictor

Show HN: Viral Potential Predictor (hn-ph.vercel.app)

30 points by salebanolow 10 months ago | 16 comments

Screenshot of elk.zone: Potential third critical PHP CVE

Potential third critical PHP CVE (elk.zone)

50 points by mpaepper 4 days ago | 17 comments

A Mastodon thread by security researcher Elise describing a newly found PHP double-free vulnerability affecting 8.4 and 8.5, reported to [email protected] with details withheld.

php double-free vulnerability-disclosure addresssanitizer

Screenshot of skylens.yantraai.app: Show HN: Live 3D satellite tracker and the declassified Pentagon UFO archive

Show HN: Live 3D satellite tracker and the declassified Pentagon UFO archive (skylens.yantraai.app)

36 points by skylensspace 2 months ago | 17 comments

Screenshot of beaksec.github.io: Telegram Desktop vulnerability allowed any user's file to be stolen

Telegram Desktop vulnerability allowed any user's file to be stolen (beaksec.github.io)

448 points by g-b-r 16 days ago | 285 comments

A security research blog post describing a one-click account takeover in Telegram Desktop via an unescaped separator in its single-instance IPC, enabling arbitrary file theft.

telegram-desktop ipc-injection account-takeover vulnerability