H1 HackerOne LIVE
3CX
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.3cx.com
- managed triage
- yes
- response efficiency
- 95%
- first response
- 9h avg
- time to bounty
- 107h avg
8 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://portal.3cx.com | domain | yes | critical | 2026-09-20 |
3CX SBC | executable | yes | critical | 2026-09-20 |
https://apps.microsoft.com/detail/3cx/9NW77489NGJ0 | executable | yes | critical | 2026-09-20 |
https://apps.apple.com/us/app/3cx/id992045982 | mobile | yes | critical | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.tcx.sipphone14 | mobile | yes | critical | 2026-09-20 |
3CX Live chat WordPress plugin | other | yes | medium | 2026-09-20 |
3CX Phone System | other | yes | critical | 2026-09-20 |
Other | other | no | none | 2026-09-20 |
1 out of scope — black ICE, don't touch
*.3cx.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.