Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
126fbed5-1af9-45d1-a64a-630cec8de494.unifi-hosting.dev.ui.comdevIn scope2026-11-14
12a40a49-6b53-455a-9eab-85fe176ae303.unifi-hosting.dev.ui.comdevIn scope2026-11-14
12c0abd0-6129-42c3-b89c-bef921fca84c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1302a71b-2141-405d-94ef-a9a9d98fe74d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
132e8ee8-a206-43b0-9a06-43e97ca6af39.unifi-hosting.dev.ui.comdevIn scope2026-11-14
137956fd-9b49-44ae-acf6-0d5ac7aa22ef.unifi-hosting.dev.ui.comdevIn scope2026-11-14
13afae59-c200-4433-8d93-fca7d34c28e9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
13bf42b8-6b41-478a-9c94-0ed6856dcfde.unifi-hosting.dev.ui.comdevIn scope2026-11-14
13c7cbd5-ecbb-4c66-82f0-fc6de22aff7d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
13d12c8b-0203-459e-b632-42bf6ba34369.unifi-hosting.dev.ui.comdevIn scope2026-11-14
13da63f9-da2d-4f32-9e51-2ec4b82b50f1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
13e39876-478c-438f-a207-5dcb95ba27be.unifi-hosting.dev.ui.comdevIn scope2026-11-14
14101fb4-3d85-4203-9f23-da92e9bd1c9a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1467d6e1-5da9-4ab2-90f5-c7d12638685e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
14697531-74ce-4a66-ae3e-3e941785c4d3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1476241b-0aca-4464-b822-47c11302b445.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1491c450-741b-4157-89fb-27da04a62baa.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1498fb64-2156-439e-a9b6-f59add2608e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
14b1c552-7a10-4c40-9e11-fbdfd6890f19.unifi-hosting.dev.ui.comdevIn scope2026-11-14
152e6232-3c94-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
153dd478-b176-4d94-b0c8-d2ed7a0b88c6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
154ab325-fe75-4b37-9640-aac7308d0858.unifi-hosting.dev.ui.comdevIn scope2026-11-14
157108dc-8bde-422a-b424-0d7caa8fd7e7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1588772d-f730-4350-aaf7-33df77da12fd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
15cbdbb4-5b1b-40fc-90e6-60ae68c32b14.unifi-hosting.dev.ui.comdevIn scope2026-11-14
15e07356-8c0f-4d81-876c-c6dec93c5850.unifi-hosting.dev.ui.comdevIn scope2026-11-14
15fa1127-8f54-4840-adcc-a845aa4729da.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1613b98d-42cf-4dd2-a3ed-fd6b09443a35.unifi-hosting.dev.ui.comdevIn scope2026-11-14
16232036-336a-4140-86f5-89c73104c1c1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
164b402d-cff8-43da-ba25-f3a1afa86ba7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
167c43f9-7fad-4032-9f93-35529622aebb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
16b40fb8-8ca5-4eff-86d4-7f769f21d2d8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
16d25c55-4170-4be7-bff0-864d9e29e0f2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1760db3f-9c8c-47b1-bccc-43479765fb24.unifi-hosting.dev.ui.comdevIn scope2026-11-14
17cb74a6-c836-4b5a-b70c-e3403008a5ea.unifi-hosting.dev.ui.comdevIn scope2026-11-14
17eecbcd-d548-4359-84df-2d580a8a91c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
18084fcc-2d85-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
182879c5-dbc9-44b2-98c1-1b8426c4b07d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
184d979c-7150-4a81-89e2-6f22a06d363d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
185fe591-828b-48eb-a98a-a08bbfec71f6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
18694510-704e-4603-9f3d-b523b6a3fc93.unifi-hosting.dev.ui.comdevIn scope2026-11-14
187947e5-e5ee-40ec-88e0-89896bde2d2c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
18918397-4374-40e3-9768-40f0f135dc28.unifi-hosting.dev.ui.comdevIn scope2026-11-14
18d0b345-49a2-4e10-ace9-9ef091a08a0a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
18fb5180-bb14-4c6f-b3ff-f3da77ded4dc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
18fe2410-3c94-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1925a0ba-1765-4d51-a52e-ea831b2ef7c1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1975d8aa-4704-4d9e-87af-8bbd9b6fc084.unifi-hosting.dev.ui.comdevIn scope2026-11-14
197f5174-55ba-4408-92ec-9187c1ff3620.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1a2f423f-b478-4508-b35f-656c7f50acdf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1a606901-c9b2-49d6-8ec6-0b2a7f1b2928.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1a9826ec-5f2f-4a59-a23f-0a2fa814cc61.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1aaaf6db-af28-4077-81cf-97697f93b6a0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ab6adad-81c3-4d51-a384-275e7166f241.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1b1474aa-4f1e-4cd4-85fb-00f46513629b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1b2484be-323f-466a-a915-712f1fa00f07.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1b54b9bb-3e6b-46c4-97a9-c1917b03ca75.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ba82cc0-7a8a-4986-a7ac-d82e05ff2355.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1bc485ed-40c8-4523-b081-0e26f60b2254.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1bd715fc-84db-4f1f-bb58-cc13db2db480.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1bde6974-4117-43dd-94bd-56889df4bff9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1bfdeaea-8a47-445f-8c66-12f3f80929fe.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1c2da04d-6603-4d2b-8f5e-b5c61e6ae7db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1c8d40c1-4dcc-41ca-821d-dffaeebb4393.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ca47d9c-090d-496a-aac3-ce7cffe5ac87.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ccc4a39-b099-4ffe-93bc-65b3de5be746.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ce7e3c1-0469-4c4c-a590-f3f4e5fe0739.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1cead2be-5403-47ce-a7e9-e00cc0fda938.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1cfd2a6b-c118-43da-ab8a-778ace60ace1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d2d3527-e2e9-45c2-8c1f-bbd837edfe0d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d66ef16-4478-492d-a66a-651ea6dd36c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d6df68d-961b-45d9-a149-ab77cfd356f1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d75dc60-42dc-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d7ec86d-5cd4-48aa-b087-f0de48bfaed2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d96a118-2c7f-4e3f-b8eb-5715c3305e9e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1dbad3b4-9195-44b2-9326-272e722818d1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1dd23f0a-5e3e-46e2-be5d-3d31c7ea10cb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e00f04f-1414-46a2-9fd3-d79160c64878.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e264178-4a3d-4ee4-ae7a-6f4981ae8448.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e2eb1d4-ed98-4f69-961c-2635dd092806.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e3c27eb-f8a1-49f4-aab0-4f0db1c0e6e4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e5eb15e-3c94-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e6977cb-af10-411b-870e-366202450f7b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e87cf24-9d5b-4a79-b600-e9cb5e5b8e5c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e8dee78-d348-422b-954d-cfbc38bb6150.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1eab1092-e6b9-4b8f-b115-77d6f2b9b979.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ec995a8-8af3-4dbe-98bf-63638ee763ce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ece4e99-6287-4d18-8bd0-0cd7e103ac48.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ed55610-ff31-4942-9985-9ccd32184c77.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ef33faa-8329-445a-9db4-972666d24e8b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1eff3be6-148c-4fdc-90d1-ea49fd4443d3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1f317cc8-4959-426b-8b50-4940008d4724.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1f5aae26-682d-46c8-a568-d5254504952e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1f8287a4-c0cc-494e-b41b-d38b631508c1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2016d902-13ea-43fd-aeb7-563e7bca9e4f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
201bcd67-6185-4bc4-ae68-a892dfbbc4db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
20388cbb-0349-4c7a-8804-e1a643f6c2b6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
205c1e7a-e1e8-4bcb-9c39-27f03c0872ff.unifi-hosting.dev.ui.comdevIn scope2026-11-14
206bb5e2-f1c7-4ac7-a596-835a14e2c704.unifi-hosting.dev.ui.comdevIn scope2026-11-14
20b731ae-9533-4669-a8f1-3580e1889d54.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.