Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
54513b2f-a189-4bd7-83b6-440f9e5c5a29.unifi-hosting.dev.ui.comdevIn scope2026-11-14
54751d0a-fff3-4ade-82c1-e1e6dc483724.unifi-hosting.dev.ui.comdevIn scope2026-11-14
547cdc9d-ae44-45bf-818b-edeea1b8ff78.unifi-hosting.dev.ui.comdevIn scope2026-11-14
54f5836e-dc87-4691-934a-6b8f65591330.unifi-hosting.dev.ui.comdevIn scope2026-11-14
55350142-ac82-4b17-8a04-d90177aee727.unifi-hosting.dev.ui.comdevIn scope2026-11-14
55976f1d-aa35-41b6-a1ca-32f89551fd93.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5618ee3e-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
561cb546-3dcd-4fac-af6d-e52e9eed6b57.unifi-hosting.dev.ui.comdevIn scope2026-11-14
566ba24f-edc6-4fb1-adac-6919a5c0411b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
56746006-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
568adfba-544d-404e-ab17-2ad2dd5e0aae.unifi-hosting.dev.ui.comdevIn scope2026-11-14
56ff8169-b0b7-4d75-8f7f-ac233dddc758.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5788d3b4-95f9-492d-a141-2ead9a02eeb8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
579b69d4-0dee-4d71-81f6-411820512782.unifi-hosting.dev.ui.comdevIn scope2026-11-14
57b67278-832a-4d54-9c57-37663adbecf1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
57c4d4f5-e3dd-4aba-83f1-7036245da5c8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
57ca537e-d5d1-4fcd-9765-ed3ea7d759c3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
57d8e027-cbea-4a51-a93d-0eee1468e485.unifi-hosting.dev.ui.comdevIn scope2026-11-14
57ecdb84-67a6-4e4e-b47a-e56b4da08557.unifi-hosting.dev.ui.comdevIn scope2026-11-14
57fed423-a77e-444d-bb7f-f494172a7f67.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5801eafd-1699-402e-9e22-e8e982258b52.unifi-hosting.dev.ui.comdevIn scope2026-11-14
584a3dbe-0151-4a2d-804e-9707b05667b7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
584aecae-d29b-4762-b7c8-ac995a1b5415.unifi-hosting.dev.ui.comdevIn scope2026-11-14
585dca3c-2969-4959-bfc7-bc8cf8155875.unifi-hosting.dev.ui.comdevIn scope2026-11-14
589af46c-1b9a-49b6-99f7-2924944b9c80.unifi-hosting.dev.ui.comdevIn scope2026-11-14
58cc7370-ae85-498e-93a4-c9e427eea211.unifi-hosting.dev.ui.comdevIn scope2026-11-14
58ef90fc-e043-4f83-9cfc-548ac4c611ec.unifi-hosting.dev.ui.comdevIn scope2026-11-14
58fb9650-7b70-4dbd-8238-b1cc8dd9cc01.unifi-hosting.dev.ui.comdevIn scope2026-11-14
591b7113-ea67-431e-9c82-b68bf00ae0a4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
591bcfb0-0be8-442f-96f4-5b09f859a4a6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
593fd0cc-bbdd-4126-9d24-1a76dccbe1b1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
59511315-63d6-488f-ac5d-edd0f543d8b6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
59627bb2-9a6d-4ac0-a713-b7108fddb9fb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5966ccdd-da0a-4327-98cc-939a3819535b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
596c015d-ce17-4802-8145-ade9bd38539e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
59f2c96c-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5a041d35-fdcc-49ef-a640-b2e2335805d7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5a106c11-e851-4dc4-ad44-234cdeb1e012.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5a47ea8f-bb2d-496f-b124-ddd627701c09.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5a53e6ec-7aed-4ab0-b060-09587e987127.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5a5d68e8-99b3-4421-91e2-e64d456b7f1d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5a63ade8-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5a74ecde-37d2-4a9a-ac47-12cb59bed9e3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5a89d13b-1710-4cd5-adef-d5ba26b96f0d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5aaf222f-d7b4-49d2-8095-1d567d2ed972.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5ac86573-9ebd-44bf-bb32-d9ef76b8465c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5ad070b8-197e-4266-88a6-8385b878ca77.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5af0571c-cc14-460c-a5c1-9961c65e807c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5b275eed-0c70-4aea-bdf0-cc16daf5c1df.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5b632871-da71-4c68-ab53-bb92fb51a267.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5b63a76b-9e42-415b-9e3d-bda8230d7151.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5b7a0884-0655-4e8a-b746-14d5dea9cd3d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5b7aea48-5148-4e99-a8b0-653cd534e1d8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5b9a4161-42a9-41ce-b4c3-a997d663211f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5bd896a7-d71d-4dc1-ba41-fd75bd65cb8d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5be8a641-cbb5-47ce-8217-43e9cc0e4c68.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5c253349-606b-464c-af03-64892b07c3f0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5c3d102d-4a6e-41b6-be6a-208061663d9d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5c5b35a2-616b-4e39-8730-9689570f41e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5c6132e8-5400-4ade-b7ed-d6f1d5039fcb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5c65a86d-88d3-492a-8819-6ee48ffbdd52.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5c6ae7d7-c94d-4d09-9d70-d3b2867fd834.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5c7aacdc-9f74-421e-af0f-5287278c6d54.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5c8277af-1664-45fd-91d0-ed9cb80645d0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5c8b43db-09f5-4233-a6c4-2e964882cf53.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5cc645de-9497-4aff-8ae4-bd423db48b85.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5cce7720-0821-494e-9ba0-e3ddbbdfec3d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5cd8f17e-a745-46ff-8403-fdaa47db0586.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5cda66a6-3cbe-45d6-95d0-1b8837b74605.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5d068429-1334-4240-be47-457ab179acc7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5d340bb3-c254-4576-ad67-7e7816199b8d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5d59dec1-312f-4da9-96a9-aa4ccd7a18db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5d7f3dc3-5371-4cae-85f6-887b619a34a5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5d98a568-75d5-46fa-9ebf-b7d27af85be8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5dc479b9-7128-41a0-bbea-71946726ede4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5de56fa5-9218-47c5-be27-1964e8cc10e4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5e0c84fc-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5e128921-4969-468b-9b6d-bee15a49bd30.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5e272c0c-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5e8a7e78-93f2-44cf-be90-09b9e624fe43.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5eb3ca4f-82ab-482e-9681-b625e87bcbe2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5f1cadb6-440c-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5f2c6ec1-24f7-4ba7-b342-4800b169c576.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5f777cca-9489-4c9e-8b4d-04709a7eabfc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5fae6ce1-10f7-45c6-b1b2-25924456059f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5fcc5042-2286-4a2e-8053-2ccf8173fd54.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5ff0b73f-f755-4217-a458-987d3ddee070.unifi-hosting.dev.ui.comdevIn scope2026-11-14
5ff4aa87-b035-466a-8951-4db23d771df7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
600474b0-a29d-400e-8fcd-2e28f7ac2226.unifi-hosting.dev.ui.comdevIn scope2026-11-14
60131f74-c635-4fad-b8ae-4d850432b38c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
604536ce-b96a-4243-a929-7f7f2baa132d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
608a76aa-482c-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
608b9496-926f-4c9d-b9c9-5bb0c63e0f43.unifi-hosting.dev.ui.comdevIn scope2026-11-14
60ae7e6e-c351-46a9-9c70-a12222b79a30.unifi-hosting.dev.ui.comdevIn scope2026-11-14
60f87d19-3119-415a-bb5f-8758381ad0a7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
610ba559-851d-49df-a660-a74a8e8213f6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
613182b5-4697-42f3-a997-ede956820f6d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
614b4b88-10c3-434f-b5e5-41ebd7073a50.unifi-hosting.dev.ui.comdevIn scope2026-11-14
614e8614-5910-4b43-8bc6-f2b676fd5000.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6176fe8a-7784-4cfa-a45e-9d441a1e05bb.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.