Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
d39f449e-d150-4cfa-aad9-75b7ef7d3bb0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d43b38b2-b4db-4df8-9fd8-803cb17b2e7b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d44f02ed-5ac5-4b19-bd00-45a748a40c12.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d46c2c7f-0031-4f8f-91b6-a8146ff30ae9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d48edec5-bcb0-4e33-8f95-2305a1ceced0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d4c40e99-c14c-4f88-9a3c-c1bc792915b8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d4c76a12-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d4cf5b06-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d4e1d1c1-75d7-4f3a-90e9-122fcda13273.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d54bbeb7-e196-43e1-a508-e0732d4700b7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d54f06d6-a5fd-425e-a8f6-10b0b5e9ec60.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d5b38748-3089-4deb-95a7-b73621514efb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d5f3159c-0b4d-47b9-a99c-49b8e0dd0489.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d5f7062c-65a7-4b51-bc47-f60e5b6d3dd6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d5fbf214-42e7-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d625bb09-1507-4481-b0b9-00ec7dc91931.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d62bd620-f2a7-48db-b67c-afbd1e973608.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d6382a9d-3a9e-4469-819b-a824cbd38e45.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d6600a22-f3e9-4b13-8d2d-03b0df0319b7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d697ba1b-7850-46e9-86e9-75a5a6d3e18e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d6bccce1-2e50-457b-8f6e-c964bc9e33e0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d6c0e5bb-b0a0-4564-a24f-c43a634796e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d6c227bf-28ee-4f88-aae4-ae07e449f805.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d6d3b525-8809-4176-a1c5-3bd8f3de2dca.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d6f6bb0d-013c-4459-b314-29b406ea2a18.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d735301b-0c79-424a-b541-b51f113147ce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d788d88f-0b50-4c15-a15a-4cc02a3d9bbf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d7a4edad-fe3f-4541-a969-d0b49fbd6262.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d7ac7441-0e34-4f5a-87e1-e743706db1b9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d7b2f8de-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d7ba5062-bfc0-49ca-a463-1e1c9d27935a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d7bd546d-30c6-4f47-a958-6ada211c2e83.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d7d3fc2d-38bb-4dcd-a30c-21144564122a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d7e9980d-d104-42e4-86a4-53479afd908e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d84be779-5cb2-4d82-9ae9-d035b37b65e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d8543380-bf71-4514-a02a-5a64deaeaf26.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d856b4ff-3eb3-42e2-abfa-0bf939898854.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d8a3583b-856b-4b62-b6eb-6be074d1d682.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d8a37288-8ceb-4c1e-aed8-445c11ab8d53.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d8aab440-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d8ca9f9a-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d8da4fc1-659a-4ff5-9c38-70e15787c680.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d8e0eac3-b8f8-45ad-9eca-e297987bb11b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d8e2568b-3227-420b-99ec-8e7421e4bbc8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d8feb725-912f-4283-9c88-a239a5c23684.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d90b41b4-7c5b-42ba-a0ad-9dfb4a3ed52c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d97c55a5-28bc-494e-aeca-3f95e2fc8c16.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d97d5d69-845a-4891-9a78-d53539e85f8e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d981e1a2-aafc-4f17-ba5a-c9c3c42a4fc8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d986e688-24c1-465d-9fa6-cad2fd4d99ab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d9a40abe-1c6a-4ffa-aa97-2aca418d1eb4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d9b2fca1-3dd4-4532-8fb1-2dce7ede6b93.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d9e71b3d-dd7f-4617-bd18-4e4419b8840e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
d9ef91f2-ced1-43c1-bced-30864bd6aee9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
da49e906-094a-4f90-a754-52fcce204bdf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
da8d72d8-9b60-43fd-b80e-1234d0957683.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dac86e85-43d1-4b0a-918f-64cb3357363d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
daf64777-fa58-4a69-82a9-3ce8d49d6d73.unifi-hosting.dev.ui.comdevIn scope2026-11-14
db09701f-a7f9-4a1e-9b02-2ffd76626cda.unifi-hosting.dev.ui.comdevIn scope2026-11-14
db1b3c7a-9009-40ec-829b-6eb03af0cd42.unifi-hosting.dev.ui.comdevIn scope2026-11-14
db3cc1d7-e0b0-4e41-b70a-2d85e0e93c53.unifi-hosting.dev.ui.comdevIn scope2026-11-14
db4e38f7-9cb3-46f4-8cf4-8517c9bfbc1e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
db6c01c0-ccd4-4d3c-9662-f1ed18eb7a4c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dbb500a5-e481-455e-a7ab-988dfb4f20c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dbc1abce-2e03-4f34-84d1-82f2f411c337.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dbc3f61c-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dbdcbb0f-6c9f-46b9-b859-ccd7924bfb2e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dbdd504c-0a64-4f2d-b1aa-fdb0c0496e89.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dc3ea7e6-373b-4b1b-8c4c-2043568a23da.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dc96bda6-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dcaf3df0-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dcb11fbc-478d-49e6-9e68-47d964d037b7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dcbbc523-e2cb-45df-b588-8c06010d4b01.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dced68b8-3ba3-47f3-a010-f5e6817452be.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dcefe887-a2f1-4bd8-b6e1-c781f344a9ec.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dcf71f84-c59b-48b3-a67b-33f2b144a1d5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dd28fa12-2804-44c7-8e37-4b849305bd1a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dd42f195-e71b-4a3e-aa51-88c29560ade1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dd5d85b0-d392-4074-80f2-f1bf78236bde.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dd681e49-2002-410c-a39f-eda3e1723a62.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dd6a17ce-ae76-485d-9448-17323a250832.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dd7949f6-9bfb-484b-af34-cc5a3d64387f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dd9530c2-c4c4-47a0-82f6-48dad5d98f2c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ddcc8c6b-ef2d-4677-ac90-490b3d73f192.unifi-hosting.dev.ui.comdevIn scope2026-11-14
de0ad4e6-7032-4d12-a62d-b53a7d3d44c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
de0d993b-7e46-4eb8-bdef-57cc86a60f5f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
de2c067f-c927-434f-ad12-bbdcff78c9ce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
de42e2b6-feb5-4014-9c5d-5ef02d198e02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ded511f4-de0f-4fdb-9d7f-5f2e1043d147.unifi-hosting.dev.ui.comdevIn scope2026-11-14
df52614c-03f5-4d7a-a786-12b7e195c5a7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dfc829a3-89ae-439c-8e8e-85e82fd4b780.unifi-hosting.dev.ui.comdevIn scope2026-11-14
dfce59e0-4881-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e0063fa4-31ea-42f7-8a06-5a9162ae1ccc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e019afa6-3fc6-41e7-b7b5-627fd2ef680d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e02dd108-b64e-45bb-b391-e31be622b904.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e0427676-1025-4875-9c1f-b68044f093bb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e067b44e-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e083513c-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e08ee85d-e695-4109-8b15-6114d140163e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e09a43ca-f572-4364-a58b-4969b35d311d.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.