Intel · bug bounty
Disclosed bug bounty reports
Every publicly disclosed report on HackerOne the Atlas holds: HackerOne's own outcome, severity, the weakness as filed and the access the title states, and, for analysed reports, how the bug was found in our words.
SortMost upvoted
StatusAny
WeaknessAny class
- Any class
- Cross-site Scripting19
- Cross-Site Request Forgery6
- Open Redirect1
- SQL Injection1
- Command and Code Injection19
- Injection and Smuggling1
- File and Path Handling6
- Memory Corruption4
- Denial of Service2
- Input Validation and Logic1
- Misconfiguration and Insecure Design4
- Cryptography2
- Information Disclosure4
- Authentication9
- Access Control11
- No weakness recorded8
Access (title)Any
Access (analysis)Any
TechniqueAny
98 of 15,219 reports · 161 analysed so far
- #544928ValidAnalysedPrivilege Escalation From user to SYSTEM via unauthenticated command executionUbiquiti Inc. · Command and Code Injection · 2019 · needs: a user account · OS command injection, Privilege escalation–553votes
- #511025ValidPrivilege-0 to Root Privilege Escalation on EdgeSwitchUbiquiti Inc. · Access Control · 2019–82votes
- #403402ValidPublic Jenkins instance with /script enabledUbiquiti Inc. · Command and Code Injection · 2018–74votes
- #269066ValidRemote Code Execution at http://tw.corp.ubnt.comUbiquiti Inc. · Command and Code Injection · 2017–61votes
- #430249ValidCORS Misconfiguration leading to Private Information DisclosureUbiquiti Inc. · Access Control · 2019–57votes
- #145224ValidSubdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryUbiquiti Inc. · Access Control · 2016–57votes
- #512958ValidLogin as root without password on EdgeSwitchXUbiquiti Inc. · Authentication · 2019–56votes
- #172137DuplicateAuthentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.comUbiquiti Inc. · Cross-Site Request Forgery · 2016–55votes
- #215053ValidAbility to log in as any user without authentication if █████████ is emptyUbiquiti Inc. · Authentication · 2017 · no account (title)–54votes
- #301406ValidUnrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comUbiquiti Inc. · No weakness recorded · 2018–47votes
- #139398ValidRead-Only user can execute arbitraty shell commands on AirOSUbiquiti Inc. · Command and Code Injection · 2016 · a user account (title)–44votes
- #825764ValidView Only to Root Privilege Escalation on UniFi ProtectUbiquiti Inc. · Command and Code Injection · 2021–42votes
- #323852ValidFirmware download/install vulnerable to CSRFUbiquiti Inc. · Cross-Site Request Forgery · 2020–35votes
- #207695ValidsqliUbiquiti Inc. · SQL Injection · 2017–33votes
- #260420Valid[dev-nightly.ubnt.com] Local File ReadingUbiquiti Inc. · File and Path Handling · 2017–31votes
- #156537ValidIDOR Causing Deletion of any accountUbiquiti Inc. · No weakness recorded · 2016–30votes
- #796414ValidReadonly to Root Privilege Escalation on EdgeSwitchUbiquiti Inc. · Command and Code Injection · 2021–27votes
- #197958Valid[EdgeSwitch] Web GUI command injection as root with Privilege-1 and Privilege-15 usersUbiquiti Inc. · Command and Code Injection · 2017–27votes
- #229622ValidDirectory traversal at https://nightly.ubnt.comUbiquiti Inc. · File and Path Handling · 2017–26votes
- #136891ValidSource code disclosure on https://107.23.69.180Ubiquiti Inc. · Information Disclosure · 2016–25votes
- #239719ValidPrivilege Escalation using API->FeatureUbiquiti Inc. · Access Control · 2017–23votes
- #329749ValidUniFi Video Server web interface Configuration Restore CSRF leading to full application compromiseUbiquiti Inc. · Cross-Site Request Forgery · 2019–22votes
- #179164ValidStored XSS in community.ubnt.comUbiquiti Inc. · Cross-site Scripting · 2017–22votes
- #128750ValidRead-Only user can execute arbitraty shell commands on AirOSUbiquiti Inc. · Command and Code Injection · 2016 · a user account (title)–22votes
- #109699ValidSubdomain Takeover in http://assets.goubiquiti.com/Ubiquiti Inc. · Command and Code Injection · 2016–22votes
- #179986ValidExposed API-key allows to control nightly builds of firmwares (█████████ & ████████)Ubiquiti Inc. · Misconfiguration and Insecure Design · 2017–21votes
- #73480ValidArbritrary file Upload on AirMaxUbiquiti Inc. · File and Path Handling · 2016–21votes
- #121940ValidShell Injection via Web Management Console (dl-fw.cgi)Ubiquiti Inc. · Command and Code Injection · 2016–20votes
- #80990ValidJetBrains .idea project directoryUbiquiti Inc. · Misconfiguration and Insecure Design · 2019–20votes
- #774393ValidWeb Server Predictable Session ID on EdgeSwitchUbiquiti Inc. · Authentication · 2021–19votes
- #181665ValidSubdomain Takeover (moderator.ubnt.com)Ubiquiti Inc. · Cross-site Scripting · 2017–19votes
- #350288ValidTwo Factor Authentication BypassUbiquiti Inc. · Authentication · 2018–18votes
- #201984ValidWordpress directories/files visible to internetUbiquiti Inc. · Information Disclosure · 2017–18votes
- #119317ValidRead-Only user can execute arbitraty shell commands on AirOSUbiquiti Inc. · Command and Code Injection · 2016 · a user account (title)–18votes
- #797988ValidSNMP Community String Disclosure to ReadOnly Users on EdgeSwitchUbiquiti Inc. · Information Disclosure · 2021–17votes
- #200753Valid[nutty.ubnt.com] DOM Based XSS nuttyapp github-btn.htmlUbiquiti Inc. · Cross-site Scripting · 2017–17votes
- #145128Valid[account-global.ubnt.com] CRLF InjectionUbiquiti Inc. · No weakness recorded · 2017–17votes
- #304175ValidReflected XSSUbiquiti Inc. · Cross-site Scripting · 2018–16votes
- #275515ValidStored XSS in dev-ucrm-billing-demo.ubnt.com In Client Custom AttributeUbiquiti Inc. · Cross-site Scripting · 2017–16votes
- #241044ValidPrivilege Escalation: From operator to ubnt (and root) with non-interactive Session HijackingUbiquiti Inc. · No weakness recorded · 2017–16votes
- #508256ValidEdgeSwitch Command InjectionUbiquiti Inc. · Command and Code Injection · 2019–15votes
- #406614ValidResource Consumption DOS on Edgemax v1.10.6Ubiquiti Inc. · Denial of Service · 2019–15votes
- #240098ValidCSRF: Replacing the router configuration backup having an 'operator' user and bypassing the "Referer:' whitelist protectionUbiquiti Inc. · No weakness recorded · 2017–14votes
- #221625ValidUBNT Amplification DDOS AttackUbiquiti Inc. · No weakness recorded · 2019–14votes
- #519582ValidCatch mails sent to an SMTP Server over SSL using an Evil SMTP ServerUbiquiti Inc. · Cryptography · 2019–13votes
- #332631ValidBypass blocked profile protection on aircrm.ubnt.comUbiquiti Inc. · Access Control · 2018–13votes
- #221454ValidPrivilege escalation in the client impersonation functionalityUbiquiti Inc. · Access Control · 2017–13votes
- #703659ValidRCE in AirOS 6.2.0 Devices with CSRF bypassUbiquiti Inc. · Command and Code Injection · 2020–12votes
- #289264ValidTriggering RCE using XSS to bypass CSRF in PowerBeam M5 300Ubiquiti Inc. · Command and Code Injection · 2018–12votes
- #219014Valid[dev-unifi-go.ubnt.com] Insecure CORS, Stealing CookiesUbiquiti Inc. · Information Disclosure · 2017–12votes
The status is HackerOne's own outcome. “Access (title)” is what the report's title states; “Access (analysis)” and techniques come from CyberSIXT's own analysis, a model's summary of the public report that may be wrong. Data as of 2026-11-14.