Cloudflare Public Bug Bounty · disclosed reports
No weakness filed
8 disclosed reports · $12,075 paid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open Cloudflare Public Bug Bounty on HackerOne- reports
- 8
- paid a bounty
- 5
Every one of the 8 is a mark on the map. Named now: 1 to 8, most upvoted first.
- Cloudflare CASB Confused Deputy Problem
- Using special IPv4-mapped IPv6 addresses to bypass local IP ban
- Yet Another CASB Integration Takeover of Active Integrations
- Arbitrary file read from Cloudflare Pages build environment
- [Variation of #1554049] 1-Click Chaining of Self-XSS, Cookie Tossing and AntiCSRF Token Prediction leads to auto approval in Access Temp Auth
- Take over subdomains of r2.dev using R2 custom domains
- Basic XSS [WAF Bypasses]
- Misconfigured build on websites "abuse.cloudflare.com"
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.