Cubbit Vulnerability Disclosure

generated: '2026-07-18'
method: searched
probe: true
source: https://www.cubbit.io/bug-bounty-program
description: >-
  Cubbit runs a private bug bounty program operated through the Unguess Security
  platform. Reports must be submitted through Unguess only — Cubbit explicitly
  does not process vulnerability reports via email, contact forms, or other
  direct channels. The program is invite-restricted to selected researchers.
program:
  type: private-bug-bounty
  platform: Unguess Security
  reward_max_eur: 3000
  reward_threshold: Medium severity and above
  page: https://www.cubbit.io/bug-bounty-program
scope_in:
- DS3 Cloud web interface
- DS3 Composer web interface
- https://api.cubbit.eu
- https://dashboard.cubbit.eu
- https://console.cubbit.eu
- https://composer.cubbit.eu
- https://s3.trial.cubbit.eu
scope_out:
- web.cubbit.io and marketing/landing pages
- Cubbit Cell
- Social engineering / phishing
- DoS / DDoS
- Mass account creation
- Theoretical issues without demonstrable impact
policy: [https://www.cubbit.io/bug-bounty-program]
contact: [Unguess Security platform (no direct email accepted)]
evidence:
- {source: https://www.cubbit.io/bug-bounty-program, kind: bug-bounty-page}