Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
2cdb19e4-f7b3-4700-b53a-629949ccf238.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d18d769-7393-4133-8952-796a8dfc73ef.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d2f40f1-8722-4ceb-af00-9949aa0e623d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d3447a9-068b-49fe-8c47-454443f177ff.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d40a332-a2ab-4c3d-96ec-d7270016543d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d42b111-f7cf-4ea3-a104-ed8670cfc8e9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d6aa430-6c0f-495d-a1b5-755ba598e2f4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d880b11-0394-487a-877e-e21e93d7c473.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d8ee703-5433-4ed9-bcf6-447f6e073563.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d8fb96c-a9be-47c4-8ac1-8b3f763e07d3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2d953382-2f9e-4b60-9a3c-12ff3e17698a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2dac8b94-3326-4413-9854-be3b1754b2ab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2dc4efe2-60df-4836-8995-80e3d9b1713c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2e1a219e-cc13-4769-ba94-af444d5f7de2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2e413d94-3493-4f45-982b-94b874d427fd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2e8d18cb-727d-467d-8e44-3ca4c7e15cc2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2eb8c314-ddd2-4251-9379-ff3bba81fea9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2ed401a4-c6df-4462-80c4-4acaf60db744.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2ee31bfb-b92f-4de3-9d30-935bc6201d1d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2f2c3585-7635-4c14-ab89-2f8b5aaf507a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2f38fbee-432c-446c-8a7d-e5f34c1d415e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2f401eb6-7ac7-4097-b1c7-6d224f9346dd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2f42833b-607b-4d96-a26f-1aa75144c91a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2f520cbb-8f55-4796-a46c-ea073a7365c3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2f5704c4-44b7-4746-ac85-d3cde9c60c98.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2faab9d8-d72c-4bdc-9e7b-ffc20bb9b415.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2fd26919-66f5-40f0-830d-1638b2109cce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3027be32-8862-4972-96de-0e639ddf6ba2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
304a36e0-8ade-4858-9714-a3f8f89f327c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
305e0916-67fa-4807-b587-026c22b52802.unifi-hosting.dev.ui.comdevIn scope2026-11-14
307cecc6-c75f-45c3-8b8c-7baedde527b8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
308114b0-c1c5-43f3-a6a6-8323f88ef08d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
308f47f0-94d7-4765-b24d-97868b741b4d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
30948bc8-ff05-4b2f-8e31-e7fa5a8730f2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
30ba43c5-def8-405b-a878-eeffda8b4445.unifi-hosting.dev.ui.comdevIn scope2026-11-14
30c0bd7e-1267-4b48-aafa-9086de838472.unifi-hosting.dev.ui.comdevIn scope2026-11-14
30c2ed6f-3e66-483d-a4cb-f065e256a4e3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
30dc4997-f67d-4580-ad7d-e258da1ae6e7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3110c32f-3199-42fa-b9b8-911e3c04917c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3155d85d-ba90-44c5-a266-773325c526ab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
315b80f0-be96-4cd5-9980-85c72894c3c5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
316a9251-30c4-488c-8e7d-dbcaa736f673.unifi-hosting.dev.ui.comdevIn scope2026-11-14
31736460-07c2-4762-8c0c-59ce22d79248.unifi-hosting.dev.ui.comdevIn scope2026-11-14
317814de-7ed8-43f2-a3bd-5de9549878fd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
31829863-586a-4e54-8f08-668ca0096e36.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3185d901-03bb-4d15-a790-53bac343129e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
31abcedb-53ec-46d6-8a55-a580424f352b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
320dad8e-0ee3-4502-855b-b544d31d83ba.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3225c167-c80c-486a-a205-807fde4a6f32.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3252ef9c-7845-4e46-8f16-c483b62471c4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3256cf67-f881-4c86-a447-7f8f2bccb580.unifi-hosting.dev.ui.comdevIn scope2026-11-14
325daa4c-996d-4529-b987-4d609d5ff40a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3286da3b-dd9b-4e88-a7d9-3bcb9b59b640.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32a7a3a7-2d7b-450d-8bc4-3b71bbfae644.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32c5a7be-57ed-4733-8c0a-ee8a13bcb50c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32cb74ac-01c3-45f3-a353-d52f86647809.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32f25d3c-68eb-4851-867e-5b3c80f6a453.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32ff4a47-ae99-4bc8-9d4a-0d0bb8e8e30a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
336006cc-fd20-45ee-95d0-84e0e975846a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
33a961b6-315e-4ce4-8ed3-d380568e950d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
33c949c2-4a97-491d-930a-c935441b9ed8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
33ceae6f-9518-4b99-9c42-9d2b8d7500d2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
341e78cf-debd-4112-9adc-69b1411f49be.unifi-hosting.dev.ui.comdevIn scope2026-11-14
342ff3a6-9099-4fbd-a3c6-0d2eb194bcfb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3442d261-9057-4612-862d-a65e0b3d6dab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34481870-2c1d-11ec-92d6-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
346de4d1-ac24-49a3-9011-5138ec960f6d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3470c623-7d26-4cd3-a662-c4ac76c12c53.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34974b03-f9ed-40b6-b086-9f6c448b091c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34a56228-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34aa0679-6aa9-4772-abc2-1e6ceec7d532.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34adfcf8-3c94-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34b9fde9-e758-4590-9493-719554d93203.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34df8c86-bd02-4e17-bb64-5cede781ea72.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34ef3b2d-c376-4c2d-9dac-2756a3b613c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
355de78f-087f-4f02-b7ec-46519d8b9c61.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35729932-3427-49fd-982a-40837e014051.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3590164f-f85b-415d-ac14-47a2daebf2b6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
359351e0-2f87-4e29-8d2f-95458bc81270.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35984916-b02a-454f-a831-b216f3a12f11.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35a5507e-1181-4435-96e1-26f0d8257e01.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35ed0c0c-250a-4b2e-a82e-f6bd7c90dc57.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35fdfaf2-389b-4e01-adf4-797bf9d5c195.unifi-hosting.dev.ui.comdevIn scope2026-11-14
362d5e5c-2302-4cb3-bb95-97cd6807ea28.unifi-hosting.dev.ui.comdevIn scope2026-11-14
366425fb-a353-490b-ad0f-cda0ab5fe0a1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
369fc498-3e36-4715-a7be-f370775242bf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
36abcc60-15d4-4795-b2ba-803a54fbdac0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
36bd81bf-3f60-47f2-8179-8e8e39191767.unifi-hosting.dev.ui.comdevIn scope2026-11-14
36ef6533-0a29-4f75-a1ec-a3f616d0efd7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
370fdc27-9cd1-4b79-84fc-f21b0639ef34.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37658cf9-7d7a-48d3-a499-62915d3c7f17.unifi-hosting.dev.ui.comdevIn scope2026-11-14
376aad96-79fc-4908-8cdb-15ab0bc13369.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3773b4b4-7515-4feb-9d2c-ebbbbe208425.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37785294-97b3-44d6-a05d-98b6e7dcc5cf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
377e35b3-f677-4f9e-a236-9b74885d2921.unifi-hosting.dev.ui.comdevIn scope2026-11-14
379f7f96-36be-49b7-a2c3-134399e9a1fa.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37cb32de-70c2-421f-8e25-2c45b03d6dae.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37d619ce-21b4-4624-ac49-37fd793b5a07.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37da2412-c6cc-41b9-a92c-f24390572b85.unifi-hosting.dev.ui.comdevIn scope2026-11-14
38266cd6-383e-4264-a4e4-de11d988b019.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.