Intel · bug bounty

Disclosed bug bounty reports

Every publicly disclosed report on HackerOne the Atlas holds: HackerOne's own outcome, severity, the weakness as filed and the access the title states, and, for analysed reports, how the bug was found in our words.

SortMost upvoted

StatusAny

DisclosedAny year

WeaknessAny class

Access (title)Any

Access (analysis)A user account

TechniqueAny

Ubiquiti Inc.Clear

1 of 15,219 reports · 227 analysed so far

#544928ValidAnalysedPrivilege Escalation From user to SYSTEM via unauthenticated command executionUbiquiti Inc. · Command and Code Injection · 2019 · needs: a user account · OS command injection, Privilege escalation–553votes

The status is HackerOne's own outcome. “Access (title)” is what the report's title states; “Access (analysis)” and techniques come from CyberSIXT's own analysis, a model's summary of the public report that may be wrong. Data as of 2026-11-14.