YWH YesWeHack LIVE

3DS OUTSCALE

€50 –€5,000 Open on YesWeHack ↗

7 targets in scope

asset	type	bounty	max sev	seen
`https://directlink.eu-west-2.outscale.com`	api	·	·	2026-09-20
`https://eim.eu-west-2.outscale.com`	api	·	·	2026-09-20
`https://fcu.eu-west-2.outscale.com`	api	·	·	2026-09-20
`https://lbu.eu-west-2.outscale.com`	api	·	·	2026-09-20
`https://osu.eu-west-2.outscale.com`	api	·	·	2026-09-20
`https://cockpit-eu-west-2.outscale.com/`	domain	·	·	2026-09-20
`Any resource created or accessed with the Outscale Cloud on eu-west-2 region - created by the Hunter`	other	·	·	2026-09-20

11 out of scope — black ICE, don't touch

Any resource created or accessed with the Outscale Cloud, on all regions - except the ones created by the Hunter other
Attack against Outscale offices (malware, backdoor, DoS, etc.) other
Dataleaks or 3DS OUTSCALE-related vulnerabilities outside the scope of the IaaS Cloud Service. other
Denial of service attacks other
E-mail server configuration (DKIM/SPF/DMARC) other
Issues in our DNS and NTP other
Issues not leading to confidentiality, traceability or integrity problems. You can report it to support@outscale.com. other
Other subdomains on outscale.com (wiki.outscale.net, fr.outscale.com, en.outscale.com... ) other
Same behavior as Amazon Web Services other
Social engineering of Outscale employees and contractors other
Vulnerabilities on products or services other than Cockpit or APIs other

No changes since we started tracking on 2026-09-20.