Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
8bbbbaed-1cfa-4ee3-94c5-117c4ef7e5ec.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8bce0a07-a512-4ccb-b22c-ec6f702d75b0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8bd2c929-cde2-4afd-9da2-d998d39fd40f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8bfd4edc-5348-43ec-bf90-ac074c3fa9c8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c0b7ec5-2bca-4994-89f9-7755230db8f4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c47bae7-92d9-4702-b241-ad12ba3b9b63.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c48ebec-55b0-473c-9dde-517e5a02f740.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c603bb6-2b8e-486f-8e24-99241a23274d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c662b0f-246f-4299-95b1-29a0b70f8dd5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c75b93d-d963-479f-ba28-0a085705a2cf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8ca49413-8410-41ee-88ec-f678cd886740.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8ccfc1eb-3bf8-4f71-a669-6f3a05308850.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8cefcaa0-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8d16a701-fdff-4532-a3e3-a5f054d7a85d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8d19e798-3756-43b4-9c9a-0f70112e80d3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8d30007d-a2f8-4656-ad11-fbb53730791f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8d988cf5-723b-4369-92aa-89777280110a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8d991855-527e-4617-b448-b092e2f16c8f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8da149fa-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8dbac00b-a210-4444-9e16-6ad7365a7a84.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8dbb4ce7-99b0-4407-847a-5830f3233b57.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8e0466d1-d751-406e-8707-5eb5e5ab445e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8e08a5fd-f018-4d0a-b70e-3326ba229cf5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8e15238e-0905-4222-a72e-da7c85f76302.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8e4b65fc-6953-4c1a-985c-49ea4619aac7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8e518ed0-2a99-43c4-af42-853a5afc000b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8e5f0e88-cfe7-4e1e-8d31-9300f12e6809.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8e8635d1-0400-4021-96e1-08b05888340e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8ebad71e-a570-404b-b4a0-096f18be8d4a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8ed93da6-6476-4a10-b0d7-430e015876a1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8edbc9ab-d942-431b-880f-fd082b115057.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8f1a7e59-068f-4e10-8d19-bc11f5d4e97a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8f2e79c4-573e-46a6-8733-fef68b931586.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8f2fbd76-806a-44c8-9310-db7fa77115bb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8f3539d9-e9ec-42de-8e49-2dcf361347a5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8f57e2fe-93b2-4f15-8e15-5168513e8471.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8f871890-5998-45b1-b4bc-65816fca3841.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8fa01c7f-4e6c-456b-a372-1839c44e9da8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8fdb16cc-45d3-4608-afe0-cbb85e300d9a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8fe6b838-cc8e-4999-99a0-afb497232ccf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
9039b879-2696-4b65-aa5b-633c8a8c8762.unifi-hosting.dev.ui.comdevIn scope2026-11-14
90d0b184-24f6-4798-972a-8192143d22e0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
90daf0a1-1ef7-4a56-9ef5-d5c93e7199eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
90e40bef-b598-4028-9306-aca9ba20b3ab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
90fa59e1-7d1c-42a5-a99f-050fb7d369be.unifi-hosting.dev.ui.comdevIn scope2026-11-14
91072550-2271-4dee-9078-ecbc3211febb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
91718be0-3437-4be8-93b6-175c9954aa95.unifi-hosting.dev.ui.comdevIn scope2026-11-14
91914416-872b-449d-b4d9-466d8bd8a977.unifi-hosting.dev.ui.comdevIn scope2026-11-14
91927215-3247-4f52-b45b-1e0d05c21cc3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
9193be2b-2c1f-43c5-81d1-d5ef8bd7230c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
91af6cd4-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
91af9ac3-0284-4394-94d8-907768780c54.unifi-hosting.dev.ui.comdevIn scope2026-11-14
91f0bf45-c430-473e-a950-626a20f7d2b2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
91f2faf1-72ac-4849-9b07-d1c854669345.unifi-hosting.dev.ui.comdevIn scope2026-11-14
91fe92a4-daee-4898-b22e-1edb9ab0c38b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
922645ee-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
923f0487-cae9-4a92-8549-f18ce6da6ac9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
92c2f50a-a89f-443c-b636-95d0617d5ce7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
930748fe-908c-4530-9d48-a30d6ae6e042.unifi-hosting.dev.ui.comdevIn scope2026-11-14
933cedc7-a7ba-4de5-b4be-0fb03623dae2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
937e1c83-1fbb-4681-95bd-8a6d69a045c8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
9387eacc-0d9e-4e0b-a375-d6f3996bd2a1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
9393b13a-646a-4f85-9a48-1b6bf2d8abd7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
93a004e0-8810-430b-9e8d-2538580fd057.unifi-hosting.dev.ui.comdevIn scope2026-11-14
93e68e24-f2c2-4ab1-b53f-dc83827dc435.unifi-hosting.dev.ui.comdevIn scope2026-11-14
941615b7-4e04-4bab-8805-dd603f05ad2b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
941dc6fe-9796-4aba-87e8-b41cc631a4b3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
94519ae7-b3c2-4329-aa3e-db500c448653.unifi-hosting.dev.ui.comdevIn scope2026-11-14
947d2663-d9f6-4ac9-81ca-681aedb6f332.unifi-hosting.dev.ui.comdevIn scope2026-11-14
94ba7c54-7d59-4cd6-b222-b0738e3cbe4f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
94c77f45-22bc-4ab7-b2a5-ac3e52657db4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
94f769fe-1c21-4d74-bc66-15e124611a1a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
951aa0ea-c650-48d3-9778-a95fcfc67158.unifi-hosting.dev.ui.comdevIn scope2026-11-14
951ac5b9-6fba-4f19-aa95-41eee77ee863.unifi-hosting.dev.ui.comdevIn scope2026-11-14
95552071-b517-4706-becf-a2674e3a0f17.unifi-hosting.dev.ui.comdevIn scope2026-11-14
958f81dd-dae0-4594-b865-449312e4c19b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
95acbb08-9018-4ad1-94c4-097e1aed5585.unifi-hosting.dev.ui.comdevIn scope2026-11-14
95bbdf74-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
95bcf513-cce9-43b7-ae5d-959f138089bc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
95bea471-9253-4225-b4d0-fa9144771c0a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
95d401e7-c151-4d42-8953-38a3b7426855.unifi-hosting.dev.ui.comdevIn scope2026-11-14
95d5cd97-51dd-4a51-99fe-206428f18d2b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
96110178-5fe2-4c41-b799-5791998a1005.unifi-hosting.dev.ui.comdevIn scope2026-11-14
96af856b-1d73-4491-b071-886bff7727d4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
96e5945f-4878-4e06-ba21-071dbe1372ce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
96e98c33-18e2-4c10-8bd6-c6eed7d8302c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
96fc9618-0a30-45db-bc7d-5541f849183a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
973731bc-3ced-4319-856e-bfe4f40f8696.unifi-hosting.dev.ui.comdevIn scope2026-11-14
9745fa53-1a2c-4b4b-bcf3-e6520219f348.unifi-hosting.dev.ui.comdevIn scope2026-11-14
974dece0-6a6d-45f0-b4a3-234b7ea03c30.unifi-hosting.dev.ui.comdevIn scope2026-11-14
975156de-dedf-4861-964a-003afc48434f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
97894bf9-3f15-4c09-a170-dafc291b8fbf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
97d8121a-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
9835129e-7b20-4d44-a473-da011e9d22a1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
985c38a1-129b-497b-9852-ac98601fea52.unifi-hosting.dev.ui.comdevIn scope2026-11-14
98cc5f2c-c3cd-4d30-b0db-bef96b930280.unifi-hosting.dev.ui.comdevIn scope2026-11-14
98ea7ec9-915b-47ec-9c8e-548656147dce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
98ecb72d-c65b-4b24-80d2-c5563e5e0c2f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
98fd62b6-5a79-4b32-9faf-298385f9ae5a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
990b2774-03d7-4a87-9c46-2b46f0eb727b.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.