Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
81def2ca-8547-438c-8e9b-0dce4629f67e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81df8a2e-50e9-4956-831f-a7bebb141f42.unifi-hosting.dev.ui.comdevIn scope2026-11-14
81f82ba2-416d-40a8-abc1-be8dae0b3c97.unifi-hosting.dev.ui.comdevIn scope2026-11-14
823b1e2a-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
826c34c2-1765-4ee3-bfee-2b6b93bc6bfb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
82747f21-4a7a-4c01-9c52-0d1338d7ee1c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
829e2824-5423-4efc-a382-4fd43157d030.unifi-hosting.dev.ui.comdevIn scope2026-11-14
82be6402-dffa-4d7a-8508-e7aa095993a5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
82c8995a-6ee3-4624-8cf3-a94dbf6c2f50.unifi-hosting.dev.ui.comdevIn scope2026-11-14
82f1ac27-a7a3-4e1d-b21c-67dbe8937f1c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8300727c-05c3-4ba2-8c90-dfcda51e072c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8383e3c3-203a-4438-95bc-d65a163acd19.unifi-hosting.dev.ui.comdevIn scope2026-11-14
83d6007d-704a-40f8-94e8-09cf959b411c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
83e86a4a-b2a4-4985-b376-22f6efbb853a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
83eb4c29-5b59-4a09-ab4a-7db4b0a3b790.unifi-hosting.dev.ui.comdevIn scope2026-11-14
840bbb94-e90a-4264-a4d7-75b82be5f0bb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84170a82-40e7-4d1f-9710-fc89a82e1fe1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84216f96-96c2-4c68-94a3-cda1430f9a8b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84440cb4-dbda-4a39-bce4-a75952b058d7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84453019-7b2f-4228-a325-eb2ded6a9c10.unifi-hosting.dev.ui.comdevIn scope2026-11-14
845924be-482c-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
845ec841-69a6-4d30-863b-34a54113464f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
845f6a90-6435-42ff-ae33-289f0b9aefe2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8482aca1-dba9-4060-8bd5-3e0290911e9b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
84e7b97c-3331-49c0-b856-17986fef485e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85157ab2-c617-4aad-8c69-2d1437faa664.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8516d751-0910-49d7-b3ac-2483ed574ea1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
853318fd-2288-474f-a949-98d7cd7f837c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8566a0b0-239d-4c88-bf99-3ad900aa8c0a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8568baf8-d48a-4791-b99d-b54ac9609fea.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85730a60-76e8-480f-8c0e-fb9e90e745e9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8576873b-264d-49a2-8166-31a481cc83f3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85793292-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85952bcb-46da-4071-afe9-bc6698c5fc66.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8596d363-6b60-4fd7-9c46-d1cb050ffb09.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85a58e62-6756-4650-a5e1-d8e4f0385bbd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85c88620-b13e-4fde-a3f0-5ee820bcb806.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85d235d0-2170-402f-935b-eefc80037be6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85f3b32b-deac-4749-87b5-0d21a86c2c8d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
85f7d230-103f-4cd4-aab8-a3273fc3f8cc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
860be7be-3ece-4d73-8a26-1262bb979045.unifi-hosting.dev.ui.comdevIn scope2026-11-14
86132fb6-586d-48a5-8d70-e540cc0a2fe5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
864e542d-be1e-4807-9e5b-1e83f7887c36.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8650269f-a1fc-40e2-a789-c531292a4e18.unifi-hosting.dev.ui.comdevIn scope2026-11-14
865ee500-4b2e-42da-92d3-a5c39021a2b9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
868a975d-f457-4643-b09e-b0618aff6cc5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
86959a59-c3d0-4c46-9728-9a2df4509dcb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
86a88b92-0eb2-41e4-b1a3-a806c9af0c70.unifi-hosting.dev.ui.comdevIn scope2026-11-14
86bd63d6-ba51-4dd9-a5b5-f4bcb6864aab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
86c8bb50-661c-46f4-a30f-0d3f091de9f2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8719a834-4ba5-4e3d-a183-d49753fa10cd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
873d8624-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
87466683-e4a6-4003-b37c-58ad1e962849.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8766f1b7-3552-4d3d-b97d-6ca43ef6e01f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
87a20806-cc84-43dd-9afa-2743d45f449d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
87addd95-97e6-4348-997c-7f6cc940c13f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
87da2b97-2750-4313-8be5-6086f7ec7248.unifi-hosting.dev.ui.comdevIn scope2026-11-14
87f3287e-7796-4e71-9cd0-18387543538e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
87f59eaf-6813-42e7-a178-102aa5bc8686.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8808fc42-0a7b-4e15-9a74-080fdb0d53f1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
881dcbe0-1f26-41ad-91f8-8a570ee81e70.unifi-hosting.dev.ui.comdevIn scope2026-11-14
882aad1d-6a00-4d1a-8ff6-8c7d36f7d066.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8864b8df-8868-4e35-a979-ec3963fc6306.unifi-hosting.dev.ui.comdevIn scope2026-11-14
889f0a77-e5fc-471e-a178-fecf9ed95aba.unifi-hosting.dev.ui.comdevIn scope2026-11-14
88edf52f-ebc5-4df8-94a9-9e297715c795.unifi-hosting.dev.ui.comdevIn scope2026-11-14
891be6e1-8888-45e9-b47d-294ed7911f00.unifi-hosting.dev.ui.comdevIn scope2026-11-14
89202496-c93d-4bb9-b9bc-6b1d518c2a40.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8933f017-e0fc-4061-aca4-67ec449f6f76.unifi-hosting.dev.ui.comdevIn scope2026-11-14
894beff9-4d57-4ca3-9ae9-ee26e0f78446.unifi-hosting.dev.ui.comdevIn scope2026-11-14
897ce0b5-95ca-4748-a3af-37d341cd75cb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
899fd2e0-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8a056f14-d1a9-4e75-a12a-7d6178c51996.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8a2781ed-b8c9-4fc9-9ce4-5859e5b8fe43.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8a3435b9-b837-4ed4-85cc-27d5b21716dd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8a42f910-2d8f-4d76-a9b4-fdf19d62e038.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8a8d9b34-942b-4195-8d17-cabaa49828cd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8b1d78f1-de1a-4ffa-9682-84e4045debed.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8b2eff5b-5976-4278-aab8-80aba161463f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8b5050bb-4f66-4578-8dbe-47522b8da0b8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8b511d22-64c8-47e9-a939-02b3c0a81397.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8b77ab97-bd31-4c55-9f19-121ae7dbac4e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8b8aa3cd-ecf6-49f3-92d6-42c9964e5394.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8ba70729-18e8-443a-a8e9-92b713949161.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8bbbbaed-1cfa-4ee3-94c5-117c4ef7e5ec.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8bce0a07-a512-4ccb-b22c-ec6f702d75b0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8bd2c929-cde2-4afd-9da2-d998d39fd40f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8bfd4edc-5348-43ec-bf90-ac074c3fa9c8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c0b7ec5-2bca-4994-89f9-7755230db8f4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c47bae7-92d9-4702-b241-ad12ba3b9b63.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c48ebec-55b0-473c-9dde-517e5a02f740.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c603bb6-2b8e-486f-8e24-99241a23274d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c662b0f-246f-4299-95b1-29a0b70f8dd5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8c75b93d-d963-479f-ba28-0a085705a2cf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8ca49413-8410-41ee-88ec-f678cd886740.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8ccfc1eb-3bf8-4f71-a669-6f3a05308850.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8cefcaa0-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8d16a701-fdff-4532-a3e3-a5f054d7a85d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8d19e798-3756-43b4-9c9a-0f70112e80d3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8d30007d-a2f8-4656-ad11-fbb53730791f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
8d988cf5-723b-4369-92aa-89777280110a.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.