Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
c61d5daf-2693-4fdf-aaa2-d6028bdbd066.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c6221a98-962e-498b-bc86-70fd7dc917d0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c63526f3-7b22-4912-9f0e-e9d38c374ffb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c668d2f0-0c3f-4692-8111-d9b807a8932f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c69f64df-22d7-488f-ab71-a7cba2fed9bd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c6a49516-d831-4a60-9e8d-b4039da36c9b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c6c0fff3-28ac-468e-9df7-6b63f3c4d824.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c6c8039b-276a-44ce-a24b-1f3fa10126c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c6fa4cc9-429e-439b-bae9-faa37db532f0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c70bc3d6-fbf8-4583-b5dd-0c0a52c4b5a4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c72b01ba-2c80-4cf9-84c2-9313abb20dca.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c7346139-1601-4353-887d-1002d632dba9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c74c0a07-8cf0-4727-b4fb-30e7098f8038.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c75ae1b4-487f-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c761ab71-bf0e-4ef8-8012-173a6b1aebb3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c78eb1ee-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c7a377ca-b4df-4994-9ce3-69aa548384b0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c7afffd0-40fc-4d1d-94e6-712ef960ff45.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c7db76f9-ebcf-4ebb-a9fe-6b3dc3a1d990.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c800b264-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c80c1df4-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c8188c17-8936-4744-856f-c64e1f2e30b9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c819e07a-b0a7-430a-8dca-dc450ce8dbd0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c854292a-e48f-4eba-9791-0ad3b764011f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c87783da-dbf5-4da2-bcd7-196f130c12cd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c8cc648f-9dea-4442-97d2-161995af76e8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c9427868-8176-4c4c-9276-c88275297fb9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c96026f1-4148-4566-96c0-974235259cb9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c9af966c-a64e-4550-a636-401e73d5f879.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c9c6e254-f810-4d3d-a677-cf8944cec537.unifi-hosting.dev.ui.comdevIn scope2026-11-14
c9ccb501-4358-4280-a5cb-a89f5211be11.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ca44ec96-ab35-4058-ab8c-0cd51e24de40.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ca725f65-3f30-4a94-88e9-1f26926435ea.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ca733978-00f1-420d-a34a-9b78f7e303eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
caa80130-182a-4bd5-8a18-25db9bc6366a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cade32d3-9a0e-44bc-abfb-6bdbd0f56a85.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cae2297c-1784-4359-9bd8-261e8df89eda.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cae319c1-25ca-41e5-8663-0466a50406b5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cae78d6c-5ff5-4761-95c2-0ccd1ccde67c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cb055216-9a29-4a27-9649-732e6de95747.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cb825707-e0ed-4116-b7b7-f6bba434a00d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cb90b34b-d2f4-4688-a8dc-7016954de3b9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cbb28d7c-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cbb95b64-1438-4171-91a7-0f038527b9f5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cbc2a56a-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cbe2a927-02e6-46b9-88a2-3b6493df0c86.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cc4e1c67-302d-432c-b002-97b1ca5ccf2e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cc801b4e-5759-4a36-962f-d5f4cd853176.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cca3a1b5-ae75-4675-b12d-e96e80feb559.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ccb7bb99-a02a-4dfb-8fc8-63e5820ddfbc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ccbd5fac-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ccc720c1-877f-4c1f-b583-e37895b44690.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ccddc1bc-377a-436c-b4ba-6efce4dae859.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cce16d63-8c08-4fc7-b6f4-d1b466193b62.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cce935da-11a8-41db-afce-4108c577a445.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cd413710-9c8c-47ae-b21d-621cd7f84deb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cd489c5c-58c6-41a1-a55d-515f5d16d924.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cd6dc840-56fd-43f6-8a5b-dfa1f2ebc0f5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cdb19771-0690-418a-86af-0bce29b1f498.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cdc45775-dad7-463a-b8ff-1fad878b423e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ce5069fb-bfd0-49dd-808a-271f2bfa706b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ce6fa84c-5aa4-405b-b34b-bf8fd1957744.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cf2dd3d7-eb1e-4c85-ac52-70e769b3279f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cf37a695-6bad-4694-bb16-ee252c447c01.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cf7212bf-0ddf-4f4b-91fe-a5411905f4f7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cf8ad5b9-7d7f-4892-b2d8-233baf769990.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cf8f5648-ffff-40be-be9f-4bd9144ca73f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cfa40bd8-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cfd46c0c-1c98-4bbe-85ab-39400d9cd134.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cfe3821b-c7ec-406c-aab7-a66723f88700.unifi-hosting.dev.ui.comdevIn scope2026-11-14
cfeab93f-5fd1-4e03-8f97-7d00590ec021.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d03dcbd5-4c9f-4376-bed0-6f874a29e557.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d03e3fbe-4487-4769-9e43-1c35bde27228.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d05f476b-63c6-48e7-9ea4-afa9f6ba331b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d0694459-829f-46ac-80f7-4d25cf74d1ed.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d0867ace-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d088a1bd-79bb-4568-9996-ad730d0b14d6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d0b6e1ba-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d0b754f2-4bf1-4d56-a9f5-1ea9a98c081a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d0be1b8e-61f9-42b0-862e-6cb23a413201.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d0d64394-7507-4016-82af-c671c32e3384.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d0ebb0c4-d19e-49a4-9f32-4e78520253b0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d10af7c5-46aa-449b-b22b-a1fc39d3ea5c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d1bb7b5e-44bc-4adf-aa55-c400819a4a8d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d1eef797-42e7-41f1-b186-870f38d4e62e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d1fd2e51-9b0a-40ab-aead-c13b76bb469f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d217fdf5-b149-4f79-b26e-d672be9debdb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d227636a-6d3e-487c-96e1-59f25ee41648.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d23bb8b8-cec9-4b4a-aa92-475535a4eb21.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d2555285-ee3d-4cd0-aee4-80792fb13606.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d2627671-5474-4f6a-8e9d-5b2c77850315.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d2d2c96a-3357-4f3e-972a-c87e4e332a9c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d3265241-4662-4aaf-8965-f1697b9568c2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d341a21f-b059-4072-a41b-05ca53be56fc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d35b46c1-4192-4118-b97e-22f40eccb5bf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d3724496-c798-4e9e-831e-7645114b7793.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d375c34c-66f5-4158-9938-c2a6c5b49b27.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d3855042-36b0-4fab-a74c-4f8e58366224.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d38feecc-215e-11ec-a340-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d39647d8-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.