Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
ba0ed8a7-728e-41de-bfcd-dd0153310a1e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bace6a66-84e4-44b5-bab0-453b400c496e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bad00bc0-e277-4e87-a9a5-7fe51be8256c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
baf5f719-eaa4-4cfe-bffc-faa98c9db551.unifi-hosting.dev.ui.comdevIn scope2026-11-14
baf9fbd8-4083-4b4b-99dc-c866a607ff95.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bb0dbdc7-103e-470e-9bf1-31f81d860e56.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bb1873ca-1339-496d-b3ed-28eba72143fc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bb2801f1-b117-4d77-ad1e-d7a7a4ad3063.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bb691025-ebb3-4c2c-a8b2-647b48ad2c8f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bb695893-b5ff-48fd-b25f-ee3caf6a8ea1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bb7b2e9c-7d17-4e2a-91b5-dd271c1102c5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bb8f6702-da4f-43ab-aacd-2eb4de68aadc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bbae58d6-3da4-43da-ab4d-5270c5cedff9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bbb8c3f0-b007-426d-b2cc-2169edfbda17.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bbe55935-c1d9-421d-8794-cacbf9c2f33b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc0a8458-f598-458c-b229-8ec7d9c44f15.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc0a8682-4881-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc0cba9c-5234-450e-8427-63235de86be4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc22e6a9-af3a-45ca-94dc-85f2af0f54ef.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc2d8914-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc3f0610-c2cb-4b6d-b464-712ee7233d8e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc49d2fe-7754-4956-bc69-b3fed7a300b4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc5321b8-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc632fe2-4338-4805-9c1d-fd2cb3d197bb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc699962-b40e-456a-b5c4-c6f1be817754.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc6d39a4-6edb-490e-bed7-03e5c3ba6291.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bc7de6f8-5615-45f8-8699-74e834ee1979.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bca2a89f-f12a-487c-8c58-efe7b91bb349.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bce5f3ac-8452-4b6b-b595-f7e28deef681.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bce7df47-18bd-4a17-85d1-2808994edfe6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bcf18839-b856-4d3d-94e6-9c944168c59d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bd04f642-4867-41a5-8896-cfaf0f81e3cf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bd3529da-be4f-4758-a65a-9fec64ac6cfd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bd93fb4e-419a-4c30-965d-1aee76b75a56.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bda0f85b-363e-4efc-acf5-7e1572f4df74.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bdd3b92e-c1d1-4356-9410-154460d858e1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bddd7ec4-36f7-449e-bfe0-ca5488b41f4e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bdf98123-8921-4f19-a84f-4baf0a9f9991.unifi-hosting.dev.ui.comdevIn scope2026-11-14
be04250d-b05e-4139-b935-2a02f940c8d0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
be0dd802-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
be0e96e2-3248-4ef6-a0c7-7537b2ebf7f0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
be2396b2-3cce-41a3-9df9-0fe0cb66416e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
be83e302-3d89-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
beebdc09-7fa2-4b47-91a4-667f36a3baa9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bf40814c-b1aa-446d-9966-ad411a4e6533.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bf8c5fdc-844f-45e8-9917-f36f1593fcda.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bfb4ab36-78a7-441f-8eb8-31ffe398387e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
bff738f6-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c004e008-31b6-428f-93b3-810c01e4485c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c010d4cd-7778-448d-80ff-f342fff6fa32.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c0353ce4-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c04d7f56-a6af-4910-8bf8-fa087a699f4c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c085672e-7d37-4bca-a699-6ce253c40929.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c0aa19e0-2166-4b98-a3fc-063a974b3bd6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c0bdc8ef-5f5a-4d9b-9495-c5327481e421.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c0d6d172-79aa-44ef-83e6-0e66cc1aae60.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c116c556-521f-4202-b0be-c863b4602399.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c11f5fb6-0621-468b-a52a-09c0745a6cdf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c14ba68f-94ce-4bd8-951a-8756bf14a4b0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c1f5fa4c-35bd-4820-912f-4675ff82b5c8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2094e42-41be-4fce-b4fb-498f78cd53fb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c21e9682-f6dc-479b-ab8b-f9e181c8f218.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c22962e4-975c-4092-b3f0-53e416f78f4a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2343495-5a24-4115-8afe-3f02b7e97540.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c23ac7d2-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c247f697-3269-4abe-82d7-1a8090efca8f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2499492-3b73-4526-92da-03279c07ffc1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2596029-4384-4965-988f-636f2645ce67.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2598654-ebae-4f24-af88-34352e56e115.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2694a67-3fe8-4a83-934e-c058f2cf7697.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2774a72-2ec9-46e0-afc9-4d53811b7c34.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2895488-5349-40b2-bb9f-11e5164466cd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c28a785d-c7da-4b7f-9659-c34ba737a27f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2e90776-c186-46a5-a515-453dc4517a21.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2f178b4-bc78-4156-b915-b70f2b9a276d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2f8d03f-2285-4a51-966f-a724785c3598.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c2fc022e-8ba2-4c96-a97e-51c931eaf4bd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c323116e-dfd9-4b4b-b7ac-9b1d4c90d4c3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c34e1951-d0b9-460e-8784-3f23873a0149.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c36e9c23-8d5d-474d-ac45-5fac3f9646e3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c3991ac7-3245-4aff-b14a-7432822b509e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c3ce2bef-2753-4679-8b58-32d002eff751.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c3d3a131-30d3-49f3-86be-01d59c2553f7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c3f421ce-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c3fac36b-5a07-4b14-97c3-332fd19b904c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c421f747-17dc-40b9-9a04-a37959f587db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c4326afd-556a-41ec-86b5-4bb102f0a95e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c441579d-8df5-4ade-9841-9046b1215c55.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c46d6aa4-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c4811fc6-547f-41f5-9997-c6b3ca17e897.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c4ac427b-3c47-42bc-a157-2f0a99d37096.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c4bae884-b167-4812-b4eb-518864796616.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c4d92947-f81b-441c-9ea9-53774a90cb6d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c4e729a8-08e2-4c23-bf35-7665be42f7fb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c53c9d21-a491-4e66-b829-ad27e64ef210.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c5485350-92ef-4bf7-943d-16253b981cda.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c5edcae7-9521-4873-9034-3a35e7f8f2d2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c603c6e6-03e8-40fe-a138-eb3c8b4f7afc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c6079441-3432-4c77-9c44-d7d9b7ab107b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c6148293-07bf-46b3-93f3-201931b2e654.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.