Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
73f755c4-30cd-4554-acbe-d1f0cac83836.unifi-hosting.dev.ui.comdevIn scope2026-11-14
74112227-ac53-45f9-b057-8cbd8841b722.unifi-hosting.dev.ui.comdevIn scope2026-11-14
741ec08c-a667-4c7d-9eb3-62e48871b884.unifi-hosting.dev.ui.comdevIn scope2026-11-14
742859cc-edd9-4490-ad74-c40fad213d21.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7439ad8e-613b-4031-89b5-c1f236c67a03.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7442d252-9cb2-4cc3-b78c-cba28f1b38eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
746c72b9-160f-45a5-ba4b-54888f66dc25.unifi-hosting.dev.ui.comdevIn scope2026-11-14
74819699-c550-4d80-944f-d43bc74a5afd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
74e36ab2-e7c6-475e-a412-8ea89238c40a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7548d994-2124-402a-8a9e-8051d29770e8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7558abbe-763e-4fa9-902a-cec02c3b223d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
757287ee-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
75ce5f1d-a0f9-4fbd-a8ec-a66b924130d7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
76108172-0d60-4498-b27c-72fd6debeb29.unifi-hosting.dev.ui.comdevIn scope2026-11-14
763faa44-1921-44d1-a856-fe6255037c15.unifi-hosting.dev.ui.comdevIn scope2026-11-14
76811639-e74e-4c5b-bccd-cad4eaa4e95e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
76c48fec-d9dd-48a5-8255-c68bd8a3f879.unifi-hosting.dev.ui.comdevIn scope2026-11-14
76eaf7b7-ef68-46ee-b0d2-cd2d6a8530aa.unifi-hosting.dev.ui.comdevIn scope2026-11-14
770a420a-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
770b2ccd-6a1f-449c-a394-d13df3ce2a5e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7729fa86-d0af-48a3-bae4-13776dbb3d26.unifi-hosting.dev.ui.comdevIn scope2026-11-14
77371d8a-e255-4cfc-ac3d-460fb4b09a00.unifi-hosting.dev.ui.comdevIn scope2026-11-14
77a9f5da-6643-440b-8427-2da9f23a7a8b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
77b39fae-a0d7-4b5c-bb9b-04a60faa743b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
77cb5608-e3ff-4be6-83a2-f8cbfc84ca6d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78073f23-dbe6-4fa4-860d-ebb796cc6d02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78636284-30df-4134-8af7-148efb871aae.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7878f167-2124-4305-aad3-aaf6c62ad85f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78893cfa-e6a8-4864-9464-d0ab3200e470.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78a1fa44-3cb8-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78a5cb5c-be66-4550-9311-4c62facf0245.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78b9db9c-e6f4-4ff6-bbd1-4a194d1847f0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78c17f50-e1d4-49f9-849d-0737d27e1c66.unifi-hosting.dev.ui.comdevIn scope2026-11-14
78dce790-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
795d3801-5479-49e9-b23b-211d59f8c214.unifi-hosting.dev.ui.comdevIn scope2026-11-14
79679f9e-c7fe-4abe-862a-a9cb288064f2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
796b7025-9f96-4357-992b-ca31300465a9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7974d52a-b926-43f7-998b-0db92c863f5f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7977d396-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
797e65d2-1f5a-4cbb-b789-dd7ff3bf2760.unifi-hosting.dev.ui.comdevIn scope2026-11-14
79c6962e-e264-4954-a429-b41c0041ea72.unifi-hosting.dev.ui.comdevIn scope2026-11-14
79dfcc18-a807-4a1c-8c27-4ea7df663f33.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7a137973-c5d7-4620-ba96-1dca1d21be45.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7a6ab190-15d0-47c7-b6e2-e48d6167e78d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7aa3dfa5-4a19-4521-bd04-f387e2c28311.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ab5b3f2-e03c-45b2-878f-0f343c3e08e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7abbf69d-c956-4d68-b9b8-602dae0914f0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7abd1f92-4dc6-442c-836f-8df6ebbac182.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ad70706-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7afa5ea6-48f0-43ff-921d-e82e68ee2296.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7b5365a8-1cff-4cb7-ad65-554b4b78068b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7b87e84c-7ed1-452f-9a07-574486ada810.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7b9d7649-7056-4eac-b5be-ee577d805033.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7bb412f9-5bc6-414f-a1ca-5679bd271081.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7beee494-181e-4a7b-adad-69946f038d9e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7bf2457c-8973-4654-885a-00d92d8cfa97.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c183b8c-e87a-496c-8ac6-26846ece085c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c3e29ed-e66b-40c6-b6b9-d68eb45e4d4c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c3fd91a-1e63-4d5c-9a8e-44fd2303fb11.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c81afa9-843f-4af2-b8db-4c7c331ab636.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7c948053-403d-4ad8-9508-39d26f457b9e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7cac90a2-054a-49ab-960c-ae7ed65ee800.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7cd1f868-c7ff-4425-98b2-3368a9c7ec93.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7cff65dc-eeec-4b2b-af3b-2b199ecc2d3f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7d02d626-ad52-4361-8686-adb405e706c1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7d1c45b5-0de8-460f-b4b4-cfc253bc8d0c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7d8e4165-da6f-4d91-a6ef-56d2cc8f9b51.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7da222e5-cf09-4163-b4d9-70cdbaad500b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7dc0f472-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7dc1a044-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7de07f22-35e3-4314-bedf-8c774c87e01b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7de95680-d0d1-4bfa-bbe0-5054fc006d86.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7e23f778-5b2c-47fd-930c-d18a694d5eb7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7e63c256-8572-45a1-be8c-0f3c640a2be0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7e6c989f-59b4-4cf8-b8ff-7d870dcbe143.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7e9d5013-e520-40f5-a3c5-cd9756c38f6f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ec50aa0-da77-438d-9b54-f70f25fb6a64.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ed77424-2111-44ae-afa5-cf6532e98c2b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7edd47cf-c9d4-434d-8623-93565970309b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ef8a2a5-9818-4323-84a3-eda79f46fd8a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f003108-0e2a-40c7-be8c-587565b5b1eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f159cc7-8bac-43f6-8224-a01ed88ea67e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f2fe8b7-cdc2-4238-ab24-9afde8dba49c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f3b1542-1343-4ac7-b6a8-e1a1df22c664.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f598fcd-0556-4360-9e31-b02e5dcae859.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7f6dd1e1-845a-4115-8c65-142251e4eabd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7fd30970-487f-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
7ff5b75e-b11f-4ca7-b294-c72f569846b1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8015e26d-d00e-4eab-a2d8-c7c1d027da1e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
805a6728-fc31-4e36-adbe-e47cbb9f58ee.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8069e14a-6e20-4a2c-b8dc-185639c321db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8078c648-f27b-4381-9c95-d74b7f1568eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
807ea8c1-4c99-4065-99c3-deb2ded8271a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
819bc702-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
819d491a-61fb-41b7-9674-2f432e813bd6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81b8ffe0-0289-4a95-9280-da863a775d74.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81b96d98-c513-4a40-ae6c-ac8544c3df7b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81bed601-b5f1-49c6-8a44-d9d8d692f394.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81c7a417-7055-480d-876c-e860ccd89d37.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81d92446-b113-4e98-9fc7-12b08466a2e6.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.