Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
2128e439-86f5-4513-88bf-9f7f5734acb6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
217315bc-4333-431f-ba86-de48f9e43375.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2176129e-42dc-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
217d5a23-eb31-4e7c-9ec0-fde8a272c798.unifi-hosting.dev.ui.comdevIn scope2026-11-14
217d7581-791d-48db-b6fb-b734ecb614eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
21c1828a-1216-4ea5-9143-e089bf272474.unifi-hosting.dev.ui.comdevIn scope2026-11-14
21d31ceb-e139-4258-87c1-5a6d4f5f6694.unifi-hosting.dev.ui.comdevIn scope2026-11-14
21e6d1a4-7a80-45a4-a183-1a96c95bbe40.unifi-hosting.dev.ui.comdevIn scope2026-11-14
21f44146-f59c-43cb-85b5-2cc37d78734b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2229229b-3be6-4d40-847a-ea3b6dacced3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
222d0905-4c2b-469b-ab77-a6887f2e5927.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2239d27b-afae-426e-8106-4630f8653777.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2239f67f-df4f-4e38-9db6-5c6d241ed933.unifi-hosting.dev.ui.comdevIn scope2026-11-14
224d7cee-af3e-49ac-9563-2938b6a4799c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
225a1af3-b7fd-4bb9-a5f4-a33fa3537958.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22677f6a-0b19-444a-97f5-2853db748623.unifi-hosting.dev.ui.comdevIn scope2026-11-14
228da895-bad0-42ef-836c-6a3f852997a1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22a40a86-646e-4dbf-a27c-c25f6efd0b42.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22a69004-a621-4c49-9254-c053e7d87992.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22c07177-d417-49b3-aa39-a01394af96ad.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22c7a043-c2a8-4838-bd46-1a06e1476d9a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22fa6f3c-bf8b-479b-a12a-932693e71a18.unifi-hosting.dev.ui.comdevIn scope2026-11-14
23256323-3bf4-4dc9-887b-d5ea33c1e53c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
232b0a24-ef2c-414d-9171-0b6a49f04659.unifi-hosting.dev.ui.comdevIn scope2026-11-14
23364c34-ed21-45b0-8a3f-306b81b6db9a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
234b7f12-b7d3-4ece-8dd2-dfb3a5c9f387.unifi-hosting.dev.ui.comdevIn scope2026-11-14
238df9ee-f4de-4ff1-b3cc-8e1dba8a4102.unifi-hosting.dev.ui.comdevIn scope2026-11-14
240e5266-7958-4294-8545-614151be54b8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2474db1d-c21e-4d76-a407-0a2afca8235e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2480ade2-9791-4608-bf95-609b0d0036c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24ba0c98-6760-44f8-bef2-abb5a523b8d5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24c1bc7f-3ca2-4b6c-8749-3b6ecd9866e4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24d1e845-4e67-40d0-9557-a7d750cab598.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24d59636-6fc5-495e-9c44-393ce2a3d414.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24fc87c2-6411-4b64-912f-24e63a82a274.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25030492-b0d0-48e9-a3bf-48de38cea1d0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2505fd32-340a-4a48-84c6-9b4868f81c27.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2520eb2d-b8eb-479d-b9a6-5f6432317a33.unifi-hosting.dev.ui.comdevIn scope2026-11-14
253340c8-b759-4ba7-aa03-64fc227fb4c0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
259951d8-7816-4137-99c7-a5a36e2b9dd0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25a1b0d0-1f89-4113-ab5d-46857421c881.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25ad2c38-1868-4916-a4f5-e87235befcb2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25b5b2f1-52e0-40dc-92a2-ac931a15bbcc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25cb8024-9d1f-4d1b-a05b-1887c17e1adc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
262233dc-ae75-4c70-b5ab-36f6f5794ca2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
26417719-bab1-4b58-b392-6ba915ec8af6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
264a02c5-9de7-4046-8079-1b7e30602d05.unifi-hosting.dev.ui.comdevIn scope2026-11-14
265a098d-8f9b-48a9-9c52-8b6fed178447.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2673f4d8-4799-4fd1-a117-8e765e9afdb3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
267c8b45-76e9-43ce-add4-f17748d3ff03.unifi-hosting.dev.ui.comdevIn scope2026-11-14
26aa7b70-fa71-43be-beac-aaf6372ca1ce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
26cc21af-6faf-4b1c-a654-22d8fd92f2c7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
26e19e41-6424-4e08-8c1b-bceecc257276.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2724a54e-47d1-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
272f5982-83bc-40fb-8056-1dc0685addbd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
273de7bb-71eb-4719-a1a5-49ac384628e7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
27702a97-a0bb-4ccb-bcfd-ff99e96b0bba.unifi-hosting.dev.ui.comdevIn scope2026-11-14
277098da-4882-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2780f31c-571e-4160-8960-6287f2e6bdee.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2789640f-27a7-4b15-9deb-5454196b8519.unifi-hosting.dev.ui.comdevIn scope2026-11-14
27ab1d62-6aee-44cd-a582-cbc741e1f8e7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
27b5b3ff-a87b-44cf-95ed-0a600503722b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
27ce5067-8ca5-4369-80a1-bf549a6741b3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
27e3b285-e561-4e17-ac38-ffcf03339d02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
280afb1b-1a0b-409d-91bb-3b1e3eeaf4e5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
281a2189-1e35-4f88-8f70-0e2cae1bf78c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
281fabe2-13dc-4faf-9625-d6585d85510c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
284c79f4-d051-422a-a008-b82d941dbcc6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2858d549-9b72-45ec-a4e5-1311e484fc92.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2862362f-7a55-4a60-9271-76944680e2fc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
28730dec-28f0-46ba-a4db-1e1f4b1bdbb5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
288e24c5-cd8d-41ce-be0d-687f72a260ad.unifi-hosting.dev.ui.comdevIn scope2026-11-14
28c7a53f-cd64-4152-93dc-b751c98f4657.unifi-hosting.dev.ui.comdevIn scope2026-11-14
291da5f7-e00c-438a-897d-aca37d384975.unifi-hosting.dev.ui.comdevIn scope2026-11-14
29681ef2-1a30-4936-b35f-4610054c20fa.unifi-hosting.dev.ui.comdevIn scope2026-11-14
29d0a25e-b1fe-4b58-a7bc-a16fe19806f6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2a04a48e-f38d-4510-bda2-bb9d507c79f7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2a0adb17-030b-4b2f-8af4-9b935b4c01ab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2a3b5587-38ee-4100-b1b0-6ec00d94edba.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2a605777-1e48-4e8a-93d6-2be7d1a9a05d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2a8cb158-5b20-4a29-b6b4-9d05d4788e8c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2aa357a1-7da3-41e5-906c-6b36837aee16.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2aa66f12-6f14-4586-811a-c9e116e4732a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2acc906d-105f-4907-9fda-99e8dbf3dff5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2aeeca6c-0560-452c-b365-acd4e8f17f3b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2aff9ee6-8cf4-4c8b-95d0-18677efc4ab9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2affa128-2a87-4323-898f-eb4a6fa46d62.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2b1cb12a-caeb-4cbf-a20d-f1d908d978a9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2b3554b4-0bc6-47d3-8452-f07bf60b27fc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2b3a52db-d157-44b8-b464-1416080c3735.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2b4f10da-ca78-482c-9e7d-22a013c3f97c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2b62e3cf-0a71-489d-9e8a-0148c6e06f32.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2b7c7134-9846-4550-9bd8-2c943f471008.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2b9500c9-3e15-4951-bb53-885299438f3c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2bb99981-61a6-44b9-a09a-e4c365b91448.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2c68600b-46fa-45af-8166-ca6f7f5b0a0e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2ca45824-4909-45ba-a129-ce63ded3cea8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2cbeb1a8-44de-42fb-b4b8-66741711c759.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2cc276b1-cd9a-4f4d-b7ac-ea62c14dacb6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2cda433e-4205-498d-9870-1cfa916e6fc5.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.