Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
45108692-aec6-4431-a543-de167be3456e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
45111674-5924-4503-83d3-fd473ef87cce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
45c1d298-db30-4a77-aa6f-4ed8cf8d15f9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
45f8dc48-d378-4b13-bd72-d30b2c46dd2f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
460b708a-ca74-4e13-ab02-0f23d60c5cdc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4634b4f8-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4657a6d5-eec0-4392-b230-42cde01e40f8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
466457e1-bbb2-4621-bda9-06b92c4640b1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4664d267-7d22-451d-8dbe-bbb1d824aa16.unifi-hosting.dev.ui.comdevIn scope2026-11-14
466cf8e9-c7dc-4c99-8e2a-0a5377d3c4ff.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4707c75b-3b8a-4217-acd7-aaf492eb1edf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
477e61df-aa3b-429e-be97-97eff3d82792.unifi-hosting.dev.ui.comdevIn scope2026-11-14
47900933-e685-4fdd-b27a-b4f1e727ed2c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
47bd3273-68b4-48b1-840b-16aae18a3a98.unifi-hosting.dev.ui.comdevIn scope2026-11-14
47dfc99d-55ec-45ec-961b-77f9edc9e932.unifi-hosting.dev.ui.comdevIn scope2026-11-14
481ca14f-4c82-45fd-b290-4aa38981aede.unifi-hosting.dev.ui.comdevIn scope2026-11-14
48858f81-a7a4-4815-b6b2-566a610f360f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
48b8a76d-c938-4cc2-aa79-2649e74608de.unifi-hosting.dev.ui.comdevIn scope2026-11-14
48f1f8ff-5eeb-4cfb-acac-4bfcadf5bf0d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
48f65618-efb4-4401-8b4e-5ecabc2b3033.unifi-hosting.dev.ui.comdevIn scope2026-11-14
48f88eff-d8b5-4e47-9ba1-c0a9848404e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
490a34fe-b99a-4b30-b8a2-fa6e6fdeaa35.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4911e4fa-79c6-4796-be1d-c45ce4a6121c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4963962b-76ba-45b7-ba15-88ad36fe7b2d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
497257a8-2ba9-4024-84d2-c360cb0d6244.unifi-hosting.dev.ui.comdevIn scope2026-11-14
49b90171-3245-47cf-8169-87443eca92c8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
49bae99a-5c70-42e2-82e1-21def8cdc463.unifi-hosting.dev.ui.comdevIn scope2026-11-14
49c4682e-f342-4b42-bacb-88d27adbbe05.unifi-hosting.dev.ui.comdevIn scope2026-11-14
49ee6485-0ecd-4467-a5e9-a391a1f2901b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4a1d0dca-83a8-4ed9-9870-e7f3a922fb9a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4a1ee4fa-5911-4333-b3e3-40c6f95cabc0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4a29277e-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4adec8df-3852-4b73-a52b-a1a2f1a30211.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4b0e66d7-007d-42ac-853f-56cd560aaf9b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4b228d0a-bc09-4280-b3b3-c897e5e2a28c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4b3d1488-f2b3-47c6-8ab5-efb19c8b83b6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4b41ba0f-eab9-467d-adae-bdcd9c1c6aa4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4babe7b2-1fb3-48c5-bf15-0648135e8601.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4bc827ec-a287-4960-9089-29fe22e935fb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4be50885-06b7-43ec-9346-4cd21f46b37b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4be9ec13-8077-4f08-a45b-56739296a7d9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4bfebe4d-cd6d-437b-8938-913795f47a9e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4c223c08-f310-4ab4-869e-64b64e80ff30.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4c2fd254-e811-496e-87f4-ceb24d1aebd1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4c459db4-926c-45ee-a2e9-9e0d4df7429e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4c4f2833-8de9-421f-b252-ffc9d55e0851.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4cb07143-0bda-4719-abb9-bd99a4c4d2c6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4cbb8d28-7406-445a-bfe4-89035e75bc13.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4cda683a-4c58-4f6d-91b0-aabcd7a15f50.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4ce1da2f-12e9-4abd-aaa2-5cc4e19cd7ab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4ce2e379-d5bf-4dea-a86b-6c6e4d34c362.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4ce41586-9bee-409f-939a-62098093cc00.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4d232c8b-9f0b-47d1-9960-2f7a0b8bd366.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4d319145-c412-4394-803d-e5ad5436a300.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4d35d92f-24ab-45e3-9e09-da85746caf90.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4d69436a-0067-4432-ba49-da69f397a2a8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4d830c90-d74c-4f70-8964-7ec561180ffd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4d923664-7e7a-48f5-aed6-f260310692c7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4dd2af48-9061-47b6-926b-c4fe9264d76c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4dd8349d-c388-45a2-b253-2cdfff159f79.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4ddb5ff4-b445-4374-b1ee-fce94492c527.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4df4492e-2c33-4bee-a9a7-b584db6c9a60.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4e0ceb64-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4e11a4f9-9eec-44cf-9afb-9b7ebb1a1411.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4e42bcfc-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4e6bb730-22cb-43e4-bf20-e967d039ab3a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4e779fce-6ec0-4a7a-91eb-5779e01244b4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4e79a93b-86c7-468e-810b-84236ecc98cb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4e893187-1008-4bc2-a021-11e41b1aa7b3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4ece73c9-fd63-40a6-a3b2-fe8f9a6c7f26.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4ee1eb4f-2282-45bc-b344-c01e54bd03b4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4f20faf9-d119-4247-975f-8fac6092b959.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4f5f138b-7179-428b-a680-e1c1f02914be.unifi-hosting.dev.ui.comdevIn scope2026-11-14
4fd673c7-ec7c-479f-8c4c-a2b5a57c5c6d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
50049c62-0bbe-4ea2-97bd-56ac8ed68d08.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5022c65d-ba16-47c2-ae84-a5ba3525b29a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5058d9e3-6fcf-4f7d-bbb4-0c0fee4b69a8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
50d8b265-2c48-4de0-b531-c3562d147c12.unifi-hosting.dev.ui.comdevIn scope2026-11-14
518e2cd4-60b9-41ce-8330-6ad76bb58d5d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
51ea3eb2-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
52032b1c-a27e-4992-854f-fe4a5c5b0fc1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5210f14c-fb8c-49af-8e5d-aad74558d959.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5235cf7e-7bc5-4391-938e-91288a1e3676.unifi-hosting.dev.ui.comdevIn scope2026-11-14
523d6f67-ab18-4682-a303-7e0a6424e969.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5251acb8-a488-4c2d-a972-a252f21a78e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
526457ee-7818-4514-bbcd-2d23c61d7408.unifi-hosting.dev.ui.comdevIn scope2026-11-14
52741cb9-8ebb-4690-9bec-46a65f713853.unifi-hosting.dev.ui.comdevIn scope2026-11-14
527a53a6-2594-44da-b0b4-f81f1db34668.unifi-hosting.dev.ui.comdevIn scope2026-11-14
528f623e-11be-4ce6-ba7a-65d996e7e8a0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
52a420b2-6134-442c-a7a0-504dc560a116.unifi-hosting.dev.ui.comdevIn scope2026-11-14
52a4ca9c-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
52c1b464-ad6b-471f-b01c-6b4006d00407.unifi-hosting.dev.ui.comdevIn scope2026-11-14
52d0f9c8-dcc9-4f41-993c-4d27c88f3cc5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
53046aa9-ff91-4f32-8365-65a5cfc05638.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5329f3ba-fe70-41c1-9890-c33026e953dd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
53a400f8-49cf-4711-833e-0a0338f4a3ca.unifi-hosting.dev.ui.comdevIn scope2026-11-14
53ff3599-f08a-4273-a972-0864226f3cf5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
540b8238-5b4d-4042-a96d-3afeb3b52b10.unifi-hosting.dev.ui.comdevIn scope2026-11-14
541ea117-c97a-4279-b18c-73c3763b5517.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5430cca2-7a38-4fc9-a4d5-9d1c307f755d.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.