Bug bounty reports15,219

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Disclosed bug bounty reports
Report	Status	Weakness	Severity	Disclosed	Bounty	Votes
Local File Disclosure (+XSS+CSRF) in AirOS 6.2.0 devices#661647	Valid	Command and Code Injection	Medium	2020-06-30	–	6
UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.#530967	Valid	Access Control	Medium	2020-04-01	–	9
Reflected XSS in Nanostation Loco M2 - AirOS ver=6.1.7#386570	Valid	Cross-site Scripting	Medium	2020-06-01	–	10
Unauthenticated request allows changing hostname#802079	Valid	Authentication	Medium	2020-04-10	–	10
UniFi Video web interface Configuration Restore user privilege escalation#329659	Valid	Access Control	High	2020-04-01	–	11
UniFi Video Server web interface admin user Firmware Update path traversal leading to local system compromise#330051	Valid	File and Path Handling	High	2020-04-01	–	11
RCE in AirOS 6.2.0 Devices with CSRF bypass#703659	Valid	Command and Code Injection	High	2020-06-30	–	12
Firmware download/install vulnerable to CSRFAnalysed#323852	Valid	Cross-Site Request Forgery	High	2020-05-29	–	35

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (4,182 analysed so far), which can be wrong. Data as of 2026-11-15.