vuln·telMCP serverToolsNew in scopeGuidesField notesGet a key

New in bug bounty scope: week 45, 2026

Nov 2 to Nov 8, 2026 · this week so far, updated daily

73 assets newly entered public bug-bounty scope in week 45 of 2026 (Nov 2 to Nov 8, 2026) on 4 programs: HARMAN International - Web Applications, Infomaniak Bug Bounty program, OpenAI, Cvent Bug Bounty. Each asset was checked against its program's own scope history: 14 raw additions that week were assets put back after a removal and 0 were renames, so they are not listed. Only assets still in scope today are shown. This is the weekly record: new programs and domains draw a rush within days, so for time-sensitive hunting use the feed or new_in_scope live.

New assets on existing programs

HARMAN International - Web Applications

YesWeHack · up to $ 2,500 · 67 new assets

  • https://be.harmanaudio.com · url · since 2026-11-04
  • https://be.jbl.com · url · since 2026-11-04
  • https://ch.harmanaudio.com · url · since 2026-11-04
  • https://ch.jbl.com · url · since 2026-11-04
  • https://de.harmanaudio.com · url · since 2026-11-04
  • https://de.jbl.com · url · since 2026-11-04
  • https://dk.harmanaudio.com · url · since 2026-11-04
  • https://dk.jbl.com · url · since 2026-11-04
  • https://es.harmankardon.com · url · since 2026-11-04
  • https://fi.harmanaudio.com · url · since 2026-11-04
  • https://fi.harmankardon.com/ · url · since 2026-11-04
  • https://fi.jbl.com · url · since 2026-11-04
  • https://fr.jbl.com · url · since 2026-11-04
  • https://hu.harmanaudio.com · url · since 2026-11-04
  • https://in.harmankardon.com · url · since 2026-11-04
  • https://in.jbl.com · url · since 2026-11-04
  • https://jp.harmanaudio.com · url · since 2026-11-04
  • https://jp.jbl.com · url · since 2026-11-04
  • https://no.harmanaudio.com · url · since 2026-11-04
  • https://no.harmankardon.com · url · since 2026-11-04
  • https://no.jbl.com · url · since 2026-11-04
  • https://pl.jbl.com · url · since 2026-11-04
  • https://ro.harmanaudio.com · url · since 2026-11-04
  • https://se.harmanaudio.com · url · since 2026-11-04
  • https://uk.harmanaudio.com · url · since 2026-11-04
  • and 42 more

Infomaniak Bug Bounty program

YesWeHack · up to $ 7,000 · 2 new assets

  • s3.gva1.infomaniak.cloud · api · since 2026-11-04
  • s3.gva2.infomaniak.cloud · api · since 2026-11-04

OpenAI

Bugcrowd · up to $30,000 · 3 new assets

  • https://chatgpt.com · url · since 2026-11-03
  • 2 scope items described in words
    • ChatGPT Desktop · other
    • Codex CLI · other

Cvent Bug Bounty

Bugcrowd · up to $3,000 · 1 new asset

  • https://accounts.app.cvent.com/paygo/signup · url · since 2026-11-04

← previous week · all weeks

An AI agent can get this live, with each host's fingerprinted stack and the published advisories for newly added code repositories, through the vulntel MCP server: new_in_scope(days=7). See the tools.