vuln·telMCP serverToolsNew in scopeGuidesField notesGet a key

New in bug bounty scope: week 39, 2026

Sep 21 to Sep 27, 2026 · published 2026-11-03

87 assets newly entered public bug-bounty scope in week 39 of 2026 (Sep 21 to Sep 27, 2026) on 15 programs: Live Nation, Vercel, 3CX, Unisys Managed Bug Bounty Engagement and 11 more. Each asset was checked against its program's own scope history: 73 raw additions that week were assets put back after a removal and 6 were renames, so they are not listed. Only assets still in scope when this digest was published (2026-11-03) are shown. This is the weekly record: new programs and domains draw a rush within days, so for time-sensitive hunting use the feed or new_in_scope live.

New programs

Live Nation

HackerOne · 25 new assets

  • app.livenation.com · url · max severity critical · since 2026-09-25
  • app.ticketmaster.ca · url · max severity critical · since 2026-09-25
  • app.ticketmaster.co.uk · url · max severity critical · since 2026-09-25
  • app.ticketmaster.com · url · max severity critical · since 2026-09-25
  • app.ticketmaster.com.au · url · max severity critical · since 2026-09-25
  • app.ticketmaster.com.mx · url · max severity critical · since 2026-09-25
  • app.ticketmaster.eu · url · max severity critical · since 2026-09-25
  • app.ticketmaster.ie · url · max severity critical · since 2026-09-25
  • dk.royalarena.app · mobile · max severity critical · since 2026-09-25
  • frontgatetickets.com · url · max severity critical · since 2026-09-25
  • https://signup.ticketmaster.com/bugbountytest · url · max severity critical · since 2026-09-25
  • livenation.com · url · max severity critical · since 2026-09-25
  • livenation.me · url · max severity critical · since 2026-09-25
  • ticketmaster.ca · url · max severity critical · since 2026-09-25
  • ticketmaster.co.uk · url · max severity critical · since 2026-09-25
  • ticketmaster.com · url · max severity critical · since 2026-09-25
  • ticketmaster.com.br · url · max severity critical · since 2026-09-25
  • ticketmaster.com.mx · url · max severity critical · since 2026-09-25
  • ticketmaster.de · url · max severity critical · since 2026-09-25
  • www.lineup.com.mx · url · max severity critical · since 2026-09-25
  • www.livenation.co.uk · url · max severity critical · since 2026-09-25
  • www.onthewaterfrontfestival.com · url · max severity critical · since 2026-09-25
  • www.royalarena.dk · url · max severity critical · since 2026-09-25
  • 2 listed on apps.apple.com
    • https://apps.apple.com/no/app/royal-arena/id1181913144 · mobile
    • https://apps.apple.com/us/app/ticketmaster-buy-sell-tickets/id500003565 · mobile

Unisys Managed Bug Bounty Engagement

Bugcrowd · up to $4,500 · 2 new assets

  • http://unifysquare.com/ · url · since 2026-09-22
  • http://unisys.com/ · url · since 2026-09-22

VR Public Managed Bug Bounty Engagement

Bugcrowd · up to $5,000 · 1 new asset

  • https://www.vr.fi/ · url · since 2026-09-24

agile doyens

Bugcrowd · up to $1,500 · 1 new asset

  • 1 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/628301060/tik-for-jira?hosting=cloud&tab=overview · url

Deview Studios Marketplace Managed Bug Bounty Engagement

Bugcrowd · up to $1,500 · 1 new asset

  • 1 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1230009/issue-ai-analytics-for-jira-cloud-private-ai?hosting=datacenter · url

HeroCoders Apps

Bugcrowd · up to $1,500 · 7 new assets

  • 7 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1211562/checklists-for-jira-enterprise-by-herocoders?tab=overview&hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1213231/checklists-for-jira-pro-by-herocoders?hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1219213/clockwork-pro-for-jira-time-tracking-and-timesheets?hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1220137/portfolio-by-herocoders-structure-ppm-for-jira-capacity?tab=overview&hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1220209/checklists-for-jira-free-by-herocoders?hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1220750/clockwork-lite-time-tracker-time-tracking-and-timesheets?hosting=cloud · url
    • https://marketplace.atlassian.com/apps/1223139/acceptance-criteria-for-jira-free?hosting=cloud · url

Presago Marketplace Bug Bounty Program

Bugcrowd · up to $1,500 · 10 new assets

  • 10 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1224380/microsoft-power-bi-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224419/microsoft-stream-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224583/microsoft-forms-for-confluence-cloud?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1224584/google-forms-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1226883/google-sheets-for-confluence-workspace-connector?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1226884/google-docs-for-confluence-workspace-connector?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1226885/google-slides-workspace-connector-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1231249/microsoft-power-apps-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1231250/microsoft-power-apps-for-confluence?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1236956/power-bi-for-jira-embed-and-share-reports?hosting=cloud&tab=overview · url

Revyz - Marketplace Bug Bounty Program

Bugcrowd · up to $1,500 · 4 new assets

  • 4 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1228694/revyz-backup-restore?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1231935/revyz-configuration-manager-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1232736/revyz-assets-data-manager-for-jira?hosting=cloud&tab=overview · url
    • https://marketplace.atlassian.com/apps/1233056/revyz-data-manager-for-confluence?hosting=cloud&tab=overview · url

Snapbytes Marketplace Managed Bug Bounty Engagement

Bugcrowd · up to $1,500 · 1 new asset

  • 1 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1237433/snapmetrics-real-time-analytics?hosting=cloud&tab=overview · url

Vico Marketplace Bug Bounty

Bugcrowd · up to $1,500 · 1 new asset

  • 1 listed on marketplace.atlassian.com
    • https://marketplace.atlassian.com/apps/1221161/uml-for-confluence-cloud?hosting=cloud&tab=overview · url

New assets on existing programs

Vercel

HackerOne · 23 new assets · 1 publicly disclosed report, most often: Access Control Check Implemented After Asset is Accessed (1)

  • *.vercel.live · wildcard · max severity critical · since 2026-09-22
  • https://github.com/nitrojs/nitro · source · max severity critical · since 2026-09-22
  • https://github.com/nuxt/nuxt · source · max severity critical · since 2026-09-22
  • https://github.com/sveltejs/svelte · source · max severity critical · since 2026-09-22
  • https://github.com/vercel · source · max severity critical · since 2026-09-22
  • https://github.com/vercel-labs/agent-skills · source · max severity critical · since 2026-09-22
  • https://github.com/vercel-labs/skills · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/ai · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/async-sema · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/chat · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/eve · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/flags · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/ms · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/next.js · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/swr · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/turborepo · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/vercel · source · max severity critical · since 2026-09-22
  • https://github.com/vercel/workflow · source · max severity critical · since 2026-09-22
  • v0.app · url · max severity critical · since 2026-09-22
  • v0.dev · url · max severity critical · since 2026-09-22
  • vercel.app · url · max severity critical · since 2026-09-22
  • vercel.com · url · max severity critical · since 2026-09-22
  • 1 scope item described in words
    • Vercel sandbox · other

3CX

HackerOne · 6 new assets

  • activate.3cx.com · url · max severity critical · since 2026-09-24
  • downloads-global.3cx.com · url · max severity critical · since 2026-09-24
  • mailproxy.3cx.com · url · max severity critical · since 2026-09-24
  • repo.3cx.com · url · max severity critical · since 2026-09-24
  • rps.3cx.com · url · max severity critical · since 2026-09-24
  • wmr.3cx.net · url · max severity critical · since 2026-09-24

WordPress

HackerOne · 3 new assets · 92 publicly disclosed reports, most often: Cross-site Scripting (XSS) - Stored (18), Cross-site Scripting (XSS) - Reflected (9), Improper Access Control - Generic (9)

  • Playground · source · max severity critical · since 2026-09-24
  • 2 scope items described in words
    • SQLite Database Integration · source
    • Secure Custom Fields · source

Swiss Post - E-Voting

YesWeHack · up to $ 230,000 · 1 new asset

  • 1 scope item described in words
    • Protocol of the Swiss Post Voting System 2.0 (Whitepaper) · other

Grab

HackerOne · 1 new asset · 20 publicly disclosed reports, most often: Information Disclosure (4), Improper Authentication - Generic (3), Improper Access Control - Generic (2)

  • 1 scope item described in words
    • Cloud & 3rd-Party Services (First-Party Misconfigurations) · other

← previous week · all weeks · next week →

An AI agent can get this live, with each host's fingerprinted stack and the published advisories for newly added code repositories, through the vulntel MCP server: new_in_scope(days=7). See the tools.