Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
78a1fa44-3cb8-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78a5cb5c-be66-4550-9311-4c62facf0245.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78b9db9c-e6f4-4ff6-bbd1-4a194d1847f0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78c17f50-e1d4-49f9-849d-0737d27e1c66.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78dce790-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
795d3801-5479-49e9-b23b-211d59f8c214.unifi-hosting.dev.ui.comdevIn scope2026-11-14
79679f9e-c7fe-4abe-862a-a9cb288064f2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
796b7025-9f96-4357-992b-ca31300465a9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7974d52a-b926-43f7-998b-0db92c863f5f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7977d396-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
797e65d2-1f5a-4cbb-b789-dd7ff3bf2760.unifi-hosting.dev.ui.comdevIn scope2026-11-14
79c6962e-e264-4954-a429-b41c0041ea72.unifi-hosting.dev.ui.comdevIn scope2026-11-14
79dfcc18-a807-4a1c-8c27-4ea7df663f33.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7a137973-c5d7-4620-ba96-1dca1d21be45.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7a6ab190-15d0-47c7-b6e2-e48d6167e78d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7aa3dfa5-4a19-4521-bd04-f387e2c28311.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ab5b3f2-e03c-45b2-878f-0f343c3e08e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7abbf69d-c956-4d68-b9b8-602dae0914f0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7abd1f92-4dc6-442c-836f-8df6ebbac182.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ad70706-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7afa5ea6-48f0-43ff-921d-e82e68ee2296.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7b5365a8-1cff-4cb7-ad65-554b4b78068b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7b87e84c-7ed1-452f-9a07-574486ada810.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7b9d7649-7056-4eac-b5be-ee577d805033.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7bb412f9-5bc6-414f-a1ca-5679bd271081.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7beee494-181e-4a7b-adad-69946f038d9e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7bf2457c-8973-4654-885a-00d92d8cfa97.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c183b8c-e87a-496c-8ac6-26846ece085c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c3e29ed-e66b-40c6-b6b9-d68eb45e4d4c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c3fd91a-1e63-4d5c-9a8e-44fd2303fb11.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c81afa9-843f-4af2-b8db-4c7c331ab636.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c948053-403d-4ad8-9508-39d26f457b9e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7cac90a2-054a-49ab-960c-ae7ed65ee800.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7cd1f868-c7ff-4425-98b2-3368a9c7ec93.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7cff65dc-eeec-4b2b-af3b-2b199ecc2d3f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7d02d626-ad52-4361-8686-adb405e706c1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7d1c45b5-0de8-460f-b4b4-cfc253bc8d0c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7d8e4165-da6f-4d91-a6ef-56d2cc8f9b51.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7da222e5-cf09-4163-b4d9-70cdbaad500b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7dc0f472-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7dc1a044-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7de07f22-35e3-4314-bedf-8c774c87e01b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7de95680-d0d1-4bfa-bbe0-5054fc006d86.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7e23f778-5b2c-47fd-930c-d18a694d5eb7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7e63c256-8572-45a1-be8c-0f3c640a2be0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7e6c989f-59b4-4cf8-b8ff-7d870dcbe143.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7e9d5013-e520-40f5-a3c5-cd9756c38f6f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ec50aa0-da77-438d-9b54-f70f25fb6a64.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ed77424-2111-44ae-afa5-cf6532e98c2b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7edd47cf-c9d4-434d-8623-93565970309b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ef8a2a5-9818-4323-84a3-eda79f46fd8a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f003108-0e2a-40c7-be8c-587565b5b1eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f159cc7-8bac-43f6-8224-a01ed88ea67e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f2fe8b7-cdc2-4238-ab24-9afde8dba49c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f3b1542-1343-4ac7-b6a8-e1a1df22c664.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f598fcd-0556-4360-9e31-b02e5dcae859.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f6dd1e1-845a-4115-8c65-142251e4eabd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7fd30970-487f-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ff5b75e-b11f-4ca7-b294-c72f569846b1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8015e26d-d00e-4eab-a2d8-c7c1d027da1e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
805a6728-fc31-4e36-adbe-e47cbb9f58ee.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8069e14a-6e20-4a2c-b8dc-185639c321db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8078c648-f27b-4381-9c95-d74b7f1568eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
807ea8c1-4c99-4065-99c3-deb2ded8271a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
819bc702-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
819d491a-61fb-41b7-9674-2f432e813bd6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81b8ffe0-0289-4a95-9280-da863a775d74.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81b96d98-c513-4a40-ae6c-ac8544c3df7b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81bed601-b5f1-49c6-8a44-d9d8d692f394.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81c7a417-7055-480d-876c-e860ccd89d37.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81d92446-b113-4e98-9fc7-12b08466a2e6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81def2ca-8547-438c-8e9b-0dce4629f67e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81df8a2e-50e9-4956-831f-a7bebb141f42.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81f82ba2-416d-40a8-abc1-be8dae0b3c97.unifi-hosting.dev.ui.comdevIn scope2026-11-14
823b1e2a-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
826c34c2-1765-4ee3-bfee-2b6b93bc6bfb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
82747f21-4a7a-4c01-9c52-0d1338d7ee1c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
829e2824-5423-4efc-a382-4fd43157d030.unifi-hosting.dev.ui.comdevIn scope2026-11-14
82be6402-dffa-4d7a-8508-e7aa095993a5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
82c8995a-6ee3-4624-8cf3-a94dbf6c2f50.unifi-hosting.dev.ui.comdevIn scope2026-11-14
82f1ac27-a7a3-4e1d-b21c-67dbe8937f1c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8300727c-05c3-4ba2-8c90-dfcda51e072c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8383e3c3-203a-4438-95bc-d65a163acd19.unifi-hosting.dev.ui.comdevIn scope2026-11-14
83d6007d-704a-40f8-94e8-09cf959b411c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
83e86a4a-b2a4-4985-b376-22f6efbb853a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
83eb4c29-5b59-4a09-ab4a-7db4b0a3b790.unifi-hosting.dev.ui.comdevIn scope2026-11-14
840bbb94-e90a-4264-a4d7-75b82be5f0bb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84170a82-40e7-4d1f-9710-fc89a82e1fe1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84216f96-96c2-4c68-94a3-cda1430f9a8b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84440cb4-dbda-4a39-bce4-a75952b058d7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84453019-7b2f-4228-a325-eb2ded6a9c10.unifi-hosting.dev.ui.comdevIn scope2026-11-14
845924be-482c-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
845ec841-69a6-4d30-863b-34a54113464f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
845f6a90-6435-42ff-ae33-289f0b9aefe2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8482aca1-dba9-4060-8bd5-3e0290911e9b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84e7b97c-3331-49c0-b856-17986fef485e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85157ab2-c617-4aad-8c69-2d1437faa664.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8516d751-0910-49d7-b3ac-2483ed574ea1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
853318fd-2288-474f-a949-98d7cd7f837c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8566a0b0-239d-4c88-bf99-3ad900aa8c0a.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.