Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
a9ec5378-4539-4791-abd1-32182e09df22.unifi-hosting.dev.ui.comdevIn scope2026-11-14
a9ec7951-773e-44e8-9637-45978105448f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aa20813a-31be-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aa3b6ea5-4a41-4da9-bd50-5b0b30fd1aa0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aa4b0c63-e02f-4cd6-a3ba-29363a2893f5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aa585855-23dd-4e3f-90b7-5e880a941a01.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aa640d6b-8dba-4eaa-a2da-0ba6aac5f6b9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aa7c836b-8854-41e3-8da9-01c27111c979.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aa918fce-b7c1-4f65-9c9f-55b8f742eb3b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aa9725a8-81fb-410d-bb4e-95d2dbfe69d6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aad07b7a-59cf-439c-a94c-09fbe9738ca0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aafe936a-6356-4ac4-9e28-0326db573a03.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ab1351a9-83d3-43ea-b49b-752b858798ae.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ab1c82f1-4edc-4c92-a229-a326d4a1d224.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ab3d9f4c-1cef-4b2b-bd12-dac44db3ac7a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ab62792e-ffb0-4330-9a67-92ced8116ba8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ab73ad7c-33ba-4711-8601-a1c37a1047e1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
abc5b7a0-ad12-41df-aaa6-d27283cb3152.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ac385fc8-2b6f-4305-ab32-c4ca4988e7db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ace7be79-89ac-499c-829f-633468f56d92.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ad5b8e0f-2a56-4e8a-bd5c-f9af134ba479.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ad684488-a1a3-4d25-84a8-9b8b0f0a2c44.unifi-hosting.dev.ui.comdevIn scope2026-11-14
adb10ab0-cbe0-46c6-aabf-2228dc06b8af.unifi-hosting.dev.ui.comdevIn scope2026-11-14
adb1bb91-be5a-40d3-a035-1d92edceb605.unifi-hosting.dev.ui.comdevIn scope2026-11-14
adbd4bf8-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
adbe27a7-133c-4809-a11a-91039bd56f7b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
adc1893f-a764-40a8-90d1-d2c05bebf70f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
add2f591-808a-4e35-9b82-ff073ac59142.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ae5294de-0404-41ba-b882-e67138f62e6d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aed2329d-5ccf-43fb-88b3-0b889c02604f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aedde30d-6eae-48f5-a7d2-1d98fd18a8c5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aef59b98-eab4-48f3-9393-7074eb176589.unifi-hosting.dev.ui.comdevIn scope2026-11-14
af397b06-64cb-4fc1-a935-778ca3c60b05.unifi-hosting.dev.ui.comdevIn scope2026-11-14
af622be1-7089-49cb-84fc-b2446db39ab0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
af8bd7e4-37c6-410d-9973-fc4b09f1df26.unifi-hosting.dev.ui.comdevIn scope2026-11-14
aff71ebc-d14e-4f8c-8d0c-40aca739b386.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b01fd251-409e-4e7e-86f0-e0c59b82618c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b0763526-4882-488b-bbcb-d906d4bcea75.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b083361c-1ab1-4db0-ba53-972e6a73ed52.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b0b38b6a-e6d8-4d9e-b3f6-1620602e657e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b0c7ebe7-ab04-438b-bc2a-13edad350e65.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b156f5d2-24f2-4ab6-a61c-c06400ff99fc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b17b8c9f-4b81-4857-b23e-1c2c73d35e14.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b1988b77-e230-4c69-8e43-d61d4eab28c6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b1c4de17-2f92-461f-9e70-490a51ee49ac.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b1c7c5ba-728f-4646-bf48-832e959202a1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b1e48a91-6402-413c-8453-65085b5bdd38.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b1f718fb-9dd6-4d57-b62f-3294c8f89bea.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b1fa605c-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b22addca-42db-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b2963754-37c7-44cd-86a0-e5599c563da4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b2a2a169-f986-458f-a3b2-aeeb87f2d927.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b2d706a5-2c8e-442c-bbda-32226087d3c4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b2ddf7bd-1c6f-4c4e-af41-467aa5c89ac2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b3357cd7-abf3-4f0d-bd35-84a94a340060.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b4253f0c-76ac-4e43-9575-fc7b02d81f47.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b45ced80-dd01-494f-97d3-4ea2b670900e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b4699e18-9a60-4a22-97cd-aab793a311d8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b46ad979-3bcb-4bac-a16f-8e33978ad86c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b4794340-9a11-474f-a771-130280c6b691.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b4ab68a2-532e-4ed6-85ce-c26cbb6f874e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b4b18f9e-a715-4acf-8133-f99ddcdbb210.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b4cdd4c2-aa5b-4c17-870d-5d98fa45ec48.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b4d59da9-e02f-46c1-a114-52c6280d30c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b4f36e79-4f09-4b7a-b4e0-4d78d02a2d4a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b514784c-16c7-4b7c-94f2-807fda70d800.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b51aaf08-7759-4ac3-b2b5-ad9ba1510868.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b537c6c8-abdf-4750-baa2-cafed6778dcd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b544ca55-180f-4fae-a811-8b452f1ad960.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b563da33-54d3-4ea5-9599-d12bd1bebe13.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b599b27b-c4c3-4be6-999f-91e1e91a947d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b5a7a91f-a30b-4181-8bda-f11ea2b58c25.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b5c9807e-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b61a813f-c608-4224-ba68-36ff0d6a762b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b6202e4c-8f15-4988-ba47-1bb0050cb902.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b6326d80-91ef-4127-9a9f-f9973626b662.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b640ea7e-1f86-4e25-bf9d-bd447d3a3b1b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b6637c99-ac56-446a-8f18-0c0ff893b478.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b6774b69-aa0b-4537-801d-a832f6cad67a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b6ba49b2-e1eb-41f7-8f08-ef13bcc748b6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b6c94bf0-313d-4e70-95ec-6949d9078aba.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b6eddb19-780c-4466-aa0e-d84e528210c3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b70451b4-9f9f-4a58-b8a6-43aa10f3dfe5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b7112b38-5436-495e-a49f-7c6763264ea8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b7129c50-5954-4e1c-9e35-fce9e54e6e86.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b74c1340-6c7d-43e5-af61-44e97e53f1c2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b75b5926-4799-4edd-85b7-7bde2933da6f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b779d10d-2eb4-472b-84c8-ed07eb14be21.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b7874d72-0aa9-43e5-b59d-1f5da5254066.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b7d635b4-4375-4139-9181-2b900c978c24.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b80ba6c4-3244-4226-a0ab-4ab38517caab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b83184b4-fc46-4073-8981-6b924fa85b72.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b83854d8-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b897a1b3-2d95-462c-91a6-78f435ffda27.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b8b1d8b1-af25-494e-9afb-c8c30bc8285d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b8e84aa5-c6fc-406d-8568-10e1ef8588b3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b93a3fac-a4e6-432d-ac03-157c963fb2db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b96c9ee1-6f6c-4813-9a36-a877de29c185.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b9c188e3-5817-4775-b3b8-998a42a66b69.unifi-hosting.dev.ui.comdevIn scope2026-11-14
b9fe5e12-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.