Ubiquiti Inc. · disclosed reports
Access Control
11 disclosed reports · $0 paid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open Ubiquiti Inc. on HackerOne- reports
- 11
- paid a bounty
- 0
Every one of the 11 is a mark on the map. Named now: 1 to 11, most upvoted first.
- Privilege-0 to Root Privilege Escalation on EdgeSwitch
- CORS Misconfiguration leading to Private Information Disclosure
- Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entry
- Privilege Escalation using API->Feature
- Bypass blocked profile protection on aircrm.ubnt.com
- Privilege escalation in the client impersonation functionality
- UniFi Video Server - Broken access control on system configuration
- UniFi Video web interface Configuration Restore user privilege escalation
- UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.
- 200 http code in 403 forbidden directories on main Ubnt.com domain
- UniFi Video v3.2.2 (Windows) Local Privileges Escalation due to weak default install directory ACLs
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.