Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
e0b0a838-a2f8-4099-a145-4acbd9814c1c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e0ba79a4-a8d9-4103-9f15-eed7f9bba37f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e0c59ee5-303c-4a90-a7b8-f4744969f5a0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e0cea13c-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e0d4d7d6-9b58-4e35-ae0d-a3eacdb6cf73.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e113a303-309b-471f-befe-44ae1407b27c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e1154d35-509a-4ac6-9c7f-f36c255551d1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e1a60abf-0094-4bd2-a2a5-2a6c03611ddf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e1b08aa1-c634-4e07-9086-e340fc1d078a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e1c1370c-2c97-4c2e-8a94-784535dee781.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e2136092-765b-4a8b-9bfd-9f24e883f773.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e26d8de7-864d-495b-ae39-728ab55595d9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e2892e66-e4bb-40c6-b9b3-005ea986a83f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e2944d00-d166-468e-a579-d9b15e359c04.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e2a0c560-42a2-444e-bda8-e52739728df9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e2a37dfc-60a4-4c99-8b68-69fa8b96fa42.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e2ba1740-67dc-49cf-b466-72e3f365df71.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e392e732-5239-45c2-9d75-c4e6f6cecfad.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e3a3528b-00fc-4d9a-a2c4-89519187c2fe.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e3b42a33-95e4-4093-9f94-c17089d05928.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e3c1b0fb-9984-4a90-91bc-f12edcbe2790.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e3ee537b-c669-41d2-a33e-2ce408f8eba1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e3f1d9a9-d84d-4a75-8646-67dbec43d717.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e42dcb18-8242-4b1f-8372-6b193aa3e5f7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e42df2c6-5991-44d1-9646-08f40eeb5563.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e458c16a-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e46a7a54-d5fc-4a69-a274-3f21e001492f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e4840d31-1c4e-4fb3-9e46-5e0942560a5e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e485d52d-416a-4e53-bb52-6da31ce6c67b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e498cafe-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e4be5634-a2dd-48f8-a537-7354111372f4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e54c5224-f00d-4947-8451-32756dab6ea0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e57bc4df-9a1e-4ad1-95e7-539091855a5a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e59f6631-e91c-432e-9c40-c0c10a4f7da1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e5ecb5ec-84dc-448f-a2b0-64f77d3c8448.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e617ba23-bcb0-4faf-9f5e-36615e127e36.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e6380f2d-d641-48c0-a03d-75f48110ee8b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e653f8f4-0cbe-4c88-a48a-7e46382fc0de.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e699a5b2-be16-4192-898b-ecd1c4d22d08.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e6bd6327-4220-4379-94c5-ed2bc2fd8a8f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e6c6292b-d2e7-4ec1-a8e6-c621d6eb6904.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e6ef6dbf-1870-4faf-86e2-f11e2f185aa5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e718f9ce-d868-4191-b83f-ca225b4e88c2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e72271a1-047a-4ed4-8a46-35ebe17180be.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e7562746-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e7570397-e9a3-4962-adcd-4d3a346a1ce1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e7998d31-752a-4338-b56f-260922b2f591.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e79d7a17-7775-4a3e-bd20-99df94579d6e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e7beddcc-156b-4cde-82c4-2790b42a5fe6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e8203829-2bcb-412a-adc2-ea8b0b3c460a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e83246bc-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e83468bc-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e835ed98-a540-46f4-b77d-b8cc763e5dbf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e85ac623-607b-4ca3-bb48-85c29d1b9924.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e8cd1c06-dbfe-432a-9b28-7e912df4e98f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e8cff680-93d8-4098-8cdf-d7bd1a7c0b51.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e8d70f1b-3e2e-4f3b-9bb3-e4b138d73bda.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e8d73d9b-fde1-401b-ad92-6c10f64151ac.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e8f3e56c-9e44-4dad-b1f4-0ed67ec7f20f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e907c043-72e5-4411-9301-13ca26424c57.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e90b123a-b469-4f0d-8c98-e890f081b66b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e92bb17f-7521-42cd-af04-5f85532918b0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e9541364-01d8-4e6a-b8c6-65d70a2735fd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e95b24bb-4fcf-4c4c-81e0-af6b5cbbaf4b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e961ca39-347b-4804-b014-bb80f0233643.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e97051aa-89cc-4382-a068-523ea869e2a5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e996a8c0-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e999a3cf-d4ba-4b78-b367-ee6f31baa3c8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e9ac9315-1a45-41e6-8067-f04fb45c9915.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e9ae0bfa-8977-4c00-a347-de00b2ba7d80.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e9cb17e7-a79d-4f05-926f-cad8162dc338.unifi-hosting.dev.ui.comdevIn scope2026-11-14
e9cf657a-be09-4677-83a8-8747cc417a1d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ea90c50a-5164-478c-a9cb-589df35a4f22.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eaa0e8e5-34e9-4033-823f-a0713486aca3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eabc2690-b39c-4ce7-87af-c8a7c0966968.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eae7f221-897b-4b16-8be9-8c527967922d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eb566793-fe53-4b68-a379-010a7bdc6fd4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eb9b839e-2f3c-4b76-903b-eee09cf48a7a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eba2fd0f-5446-4155-860f-54e011ab9725.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ebb94cc9-6592-403e-8e3c-32e4dd1f3455.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ec0181c8-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ec24a5f2-225f-4a34-9927-098c6e6fd761.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ec2890ba-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ec3191aa-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ec71db47-5d92-4e6c-b790-6f3b8e2e17bb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ec78733d-8ec6-46ba-88b8-cb1dc66661ae.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ec7d24d0-9a73-4a14-a8d6-3929e2f61a0b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ecd100dc-a4f5-4364-9304-8db1d40f64e3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ecd17185-ce90-409a-8dd8-a274c32adbb5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ed07a102-f4c2-477e-adaa-e157bbe2d272.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ed27dfe2-7cf4-41cb-8353-91780b2aa336.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ed4e91e4-6b3d-4b00-80ab-ec219c8cabd9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ed681b14-4d2c-4050-914b-4cd839e8cfdd.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eda9acf3-2c22-4d1a-9a86-c5beedd2eadc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
edb1bf36-2bc1-4072-bd1f-9817b1dd8233.unifi-hosting.dev.ui.comdevIn scope2026-11-14
edbcab9e-0a4e-452f-a605-2741e6c7e3b5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ede55fb5-d425-4fb2-9a1b-28caf64ca237.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ee07a495-03bf-4a57-bbbd-32cc99ff3b4d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ee08d480-1acf-4172-a502-6b2f4425613a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ee2f0fb2-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.