Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
617c6f12-2c11-4d0f-aa81-48835a466639.unifi-hosting.dev.ui.comdevIn scope2026-11-14
617dbf71-d152-4590-83ee-73e3cd0f24bb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6189954c-4df6-47b2-bfc7-35aecceee1ba.unifi-hosting.dev.ui.comdevIn scope2026-11-14
618cbd44-ef41-4989-9a19-360fec2b33a2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
620896a7-f74a-4e57-b87d-7c7e01c36acf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
62295f46-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6285b9d8-ebde-443b-934b-1d4b720be0ac.unifi-hosting.dev.ui.comdevIn scope2026-11-14
62b9fb18-7b6e-458e-814b-14d47cda011e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
62c35386-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
62f2803c-db18-4b7e-a742-a2cb3b2c88f1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
634ef2f9-59f7-471d-9bce-92b1be77b55c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
63673be4-ba72-42e3-9f18-246d608c56df.unifi-hosting.dev.ui.comdevIn scope2026-11-14
63967657-0ecc-4b2b-a4ec-a132384321f9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
63b55d1c-91ce-42a6-93e4-0bdc2cd4506a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
640d59c1-1713-4abc-9919-134387098749.unifi-hosting.dev.ui.comdevIn scope2026-11-14
642ce8b6-3e44-4cd5-872a-98f4b8d2d52c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
643c6719-939e-44ee-8cc8-f642b2a99911.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6446ba0c-c1a4-4fd3-8926-96cd174632b7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
646e4249-7bab-4265-8cdf-fc7a48bc5260.unifi-hosting.dev.ui.comdevIn scope2026-11-14
649c530c-a468-4eb3-be82-d1774d4b6785.unifi-hosting.dev.ui.comdevIn scope2026-11-14
64af30b3-f1c4-4a24-bc4f-14a8243514ed.unifi-hosting.dev.ui.comdevIn scope2026-11-14
64c5a24d-4db5-46fa-9854-485e818103e3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
64d2ca42-a69b-40df-98c9-1ccfd8065e40.unifi-hosting.dev.ui.comdevIn scope2026-11-14
64d863a6-1fa8-4fb1-879c-d3d6b815cad9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
65082502-4c54-45dd-9f37-8e402c0d90a0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
653ed8a6-8507-498e-92d7-27479ee641ed.unifi-hosting.dev.ui.comdevIn scope2026-11-14
657eafe7-5258-40e5-a483-658a9cc418d6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
658fbcd5-f228-42ac-8cb9-c34574ec3f15.unifi-hosting.dev.ui.comdevIn scope2026-11-14
659d06c3-74bd-4929-8e46-61d7b80767f3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
65bd3822-0f93-4172-8639-4b0a66a13cfa.unifi-hosting.dev.ui.comdevIn scope2026-11-14
65c7d2eb-35d7-4e0e-88e1-7171cf26cc12.unifi-hosting.dev.ui.comdevIn scope2026-11-14
65f2c64c-1a29-49cd-a819-44945edc9e4b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6633d52a-d6d7-43e4-83ad-a6d571f093db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6634fec8-dbbb-4547-b965-17055ea2fb4b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
665082e8-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
665fe9f6-f07b-4e3b-92cb-79fe627726b3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6676fffb-bbb3-4444-9110-b7d98fb5407d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
66bf3176-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
66eef6ba-9b36-4da9-8f58-c9252127d081.unifi-hosting.dev.ui.comdevIn scope2026-11-14
66f6671c-52f1-4e0f-b878-0a4a857dbdca.unifi-hosting.dev.ui.comdevIn scope2026-11-14
67087a45-d33c-4472-bebd-ba311df4353d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6732565f-bb52-4e32-930e-1bee3a1a6b40.unifi-hosting.dev.ui.comdevIn scope2026-11-14
673fa5d2-ee55-41ee-bc69-773b0e2e2138.unifi-hosting.dev.ui.comdevIn scope2026-11-14
677d3186-3144-464f-a57e-36e02e0958eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
678cd894-c0d6-4692-b0c7-a844fecdab61.unifi-hosting.dev.ui.comdevIn scope2026-11-14
67bd14ac-fe9b-4344-acba-33a735c34a94.unifi-hosting.dev.ui.comdevIn scope2026-11-14
67e8995c-e8ac-40f4-8958-35d8b0552850.unifi-hosting.dev.ui.comdevIn scope2026-11-14
67f9654e-1f50-47fe-a49c-935291a6b0d8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
683548b7-2ca9-490f-939d-1fab251f52c6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6883b212-c3b5-4f83-8562-82f9ddd875b4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
68867ca1-91ea-4efe-862a-a6120f131012.unifi-hosting.dev.ui.comdevIn scope2026-11-14
68c49573-8648-4d71-a9b6-48c8346f66ed.unifi-hosting.dev.ui.comdevIn scope2026-11-14
68d7ef0b-2499-4cec-80db-c63d3cfff844.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6919f003-18ae-4b0a-8ff3-87e7f4c96efc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
69546b86-8c33-4e74-b6fc-61c8c736bf6b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6973a3eb-65f9-460a-a2fb-ef25609e1f19.unifi-hosting.dev.ui.comdevIn scope2026-11-14
69a55802-f401-4ff5-845a-72823cb7384f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
69a5cdd9-a829-40fb-8824-29729526c992.unifi-hosting.dev.ui.comdevIn scope2026-11-14
69f631f8-ba75-4718-8c27-49ee0d7985b2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
69f9d4cc-1e81-4888-8214-b5beb2a89633.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6a0d5316-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6a40978c-717a-4e5f-8326-4c509bd76471.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6a487d8a-bbfe-405a-bb50-f8d1f120725d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6ac899dd-b8f9-40d9-bf5e-7c023d46339d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6ae1910e-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6b1881d1-efa0-4240-abc8-503201c9ad25.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6b7f8e5a-4c61-46ea-be8a-06a74c6ad8c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6bb42d95-6160-4e6d-a356-320c0d03177e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6bd40abf-4563-4a39-8774-eebf062349ed.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6be9ab02-734b-418d-bf8d-a80a2e41500b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6bf43582-f874-4a75-bac7-415783c3059d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6c2cdddc-561c-48e8-b1bf-4437b0942fdc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6c45c061-f4ca-49b4-9f79-54aef6ab848e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6c6b78d2-721c-4f94-888b-75e7c130e103.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6c7cc5fd-f251-4b98-b68e-9ab6f813d802.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6ce687f7-6964-4361-a49b-cf79d13e9ef9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6cfc3929-8f2a-4f44-8a3d-f1836ebb497a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6d06ecd7-68b4-4f9a-be19-3698cc164da0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6d2710c3-8101-4932-bc74-2d96e6bb7159.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6d46b435-1523-4c82-b8ec-f9cc69bbfeb5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6d4aaf8b-24c6-47cc-ad67-4b492c737db5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6d953e08-dc52-42cd-ac5b-e91ec98aa198.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6de27685-f39b-4a3d-96bc-62cd4fcc4629.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6de815b6-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6e004339-f1e6-48f8-a3a6-0dcf9f73cd87.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6e4d7e5d-04e0-445b-9090-e005a48d70c6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6eb28798-9d2a-4906-9342-361b2c240e7c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6f106340-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6f2eb22c-25e1-44eb-b88d-beff4ea1b30d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6f494568-cee2-475b-8b1a-dc2d67f4cfb1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6f75d0a8-3a82-45a9-9259-3955e6ef1b44.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6fb7884d-af16-4bc0-b255-472c0f4c6f23.unifi-hosting.dev.ui.comdevIn scope2026-11-14
6fe97941-c49f-4681-897b-fa5c5bcf0fb0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
70136ae8-0ca2-4d16-ad39-66081524b0e6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7042cb5d-415f-4d6c-9ed8-a83a88c07e2d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
706aabff-49dd-4899-b396-b92afef7fbf5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
708b84dd-8be8-4aa7-b13c-cb05307b5867.unifi-hosting.dev.ui.comdevIn scope2026-11-14
70a152d3-d9c0-4f28-9e8c-f41177999713.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7118b4ae-48b5-409f-a855-e116523f307d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7122aea2-44b6-4721-ae8b-35dc2af484a7.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.