Bug bounty reports15,219
Publicly disclosed HackerOne reports, with the platform's own outcome and severity.
| Report | Status | Weakness | Severity | Disclosed | Bounty | Votes |
|---|---|---|---|---|---|---|
| 3x Reflected XSS vectors for services.cgi (XM.v6.1.6, build 32290)#331368 | Valid | Cross-site Scripting | Medium | 2021-10-10 | – | 2 |
| Camera adoption DoS - UniFi Protect#1008579 | Valid | Denial of Service | High | 2021-02-12 | – | 8 |
| XW 6.2.0 firmware: 5 Reflected XSS issues in link.cgi#802498 | Valid | Cross-site Scripting | Medium | 2021-10-10 | – | 10 |
| SNMP Community String Disclosure to ReadOnly Users on EdgeSwitchAnalysed#797988 | Valid | Information Disclosure | High | 2021-05-23 | – | 17 |
| Web Server Predictable Session ID on EdgeSwitchAnalysed#774393 | Valid | Authentication | High | 2021-05-23 | – | 19 |
| Readonly to Root Privilege Escalation on EdgeSwitchAnalysed#796414 | Valid | Command and Code Injection | High | 2021-05-23 | – | 27 |
| View Only to Root Privilege Escalation on UniFi ProtectAnalysed#825764 | Valid | Command and Code Injection | High | 2021-05-23 | – | 42 |
Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report, where there is one, which can be wrong. Data as of 2026-11-15.