Skip to content

Bug bounty reports15,219

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Disclosed bug bounty reports
Report	Status	Weakness	Severity	Disclosed	Bounty	Votes
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025	Valid	Access Control	High	2019-03-31	–	82
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249	Valid	Access Control	High	2019-06-07	–	57
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224	Valid	Access Control	–	2016-11-27	–	57
Privilege Escalation using API->FeatureAnalysed#239719	Valid	Access Control	Critical	2017-11-24	–	23
Bypass blocked profile protection on aircrm.ubnt.com#332631	Valid	Access Control	Medium	2018-07-03	–	13
Privilege escalation in the client impersonation functionality#221454	Valid	Access Control	High	2017-11-13	–	13
UniFi Video Server - Broken access control on system configuration#129698	Valid	Access Control	High	2018-11-07	–	12
UniFi Video web interface Configuration Restore user privilege escalation#329659	Valid	Access Control	High	2020-04-01	–	11
UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.#530967	Valid	Access Control	Medium	2020-04-01	–	9
200 http code in 403 forbidden directories on main Ubnt.com domain#220150	Valid	Access Control	–	2017-04-19	–	9
UniFi Video v3.2.2 (Windows) Local Privileges Escalation due to weak default install directory ACLs#140793	Valid	Access Control	High	2017-12-20	–	3

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (4,365 analysed so far), which can be wrong. Data as of 2026-11-15.