Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
ee3b6535-e92a-4bfc-b374-de2b60b69172.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ee490742-04b8-48a0-85df-5fa5024645ff.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eeb791be-11a1-4a1e-8cb0-46873d3be08e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eee85744-84fb-4e71-b241-6815f1cfeab9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eef14d7a-bf75-4597-b53f-210aaec46f83.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eef66252-6d18-46ac-ae76-4990915a6b09.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eefca68a-1e94-4401-a1d7-052bc0a67c59.unifi-hosting.dev.ui.comdevIn scope2026-11-14
eeffdf94-09f1-4279-a070-c1bc4f39d856.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ef157bf1-76d9-48a5-a060-e063a67948de.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ef36a1d5-e878-417b-8d35-23a6876a8355.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ef853e05-6d58-4e91-b335-4dbf1a388f3d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
ef971c88-3be6-4de6-807a-98f3e3e2036b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
effba292-09a3-4388-8141-522cbac51e34.unifi-hosting.dev.ui.comdevIn scope2026-11-14
effe5616-3c93-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f00474f2-3d41-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f0449ead-84c4-4965-bb5f-4dc7b76893a7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f04a78a6-ea2a-4fc1-8f12-a238c8fc8972.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f064c32f-e301-46ab-aa1d-03d4d791cd39.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f0651158-7866-4fde-84f0-f874cd4b5723.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f07c11a0-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f07f0776-a0de-42ef-82c8-b49b038dab8c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f0ba0a39-cdb9-44e9-a64d-cbdc7aefb7a1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f0db9c36-0273-44f3-9955-0370d441cf37.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f11da9d2-6f9c-4794-8774-5046a939852e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f1245566-80b2-4a0a-bb54-1c1e471ec040.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f15eb2f3-0462-4ac5-bf2e-b4df774f87b5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f160b515-6157-4296-9303-5e94fc2a8bc5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f16e8bbf-b996-46fc-ae1f-ab25f20f15a2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f1cada4c-8409-4179-94c3-0373848f155d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f20da209-0731-4ec1-b5c5-95efc34421ce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f21eeb1f-1f3c-4c1a-87e2-4ab34e102e19.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f231875c-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f252bdc5-8e2a-4865-affa-a72761580b30.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f26cc9f4-f2de-4dac-b8e2-6fb1286ef861.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f2d895bc-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f2f6de50-d5d3-4208-a845-266530dcf4e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f3371474-cf58-4a21-ae4f-d588f9b5835c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f36fa832-f127-442a-adf6-0e348590a84b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f3736c29-ed2e-47b5-8da9-9279b88c9db1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f40cc987-d21a-410d-92e7-856aa7c936e2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f4220e4a-8b90-412e-bdd0-10155b1d949a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f435cda2-b2fd-4cde-9f28-fe19b04f30e9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f4d4c5c6-31c1-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f4ef4f31-ea57-4d57-83d8-bc0a729f1182.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f52b6ede-83c3-48c0-bc3a-4cd5c42fe43b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f576e11e-3675-4a3c-aa5e-d254b0d45a0a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f5851345-9de2-4895-bb7b-3abb84f92da2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f5857114-472f-41ae-8c1c-7460c8989389.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f5d28e82-212c-4b0f-9669-26e585e60ac0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f6014c40-46df-4cc5-9df1-1ccc50283197.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f6164718-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f67c3dd2-76dd-4ff1-a4f2-ae9a9ad5c7e6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f6873da3-696f-4069-ae1f-d631dcb06549.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f7581948-c6d8-48f0-9af9-b835539919ec.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f7638082-d9b5-49ae-bcad-9102cf4a7da4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f768e81d-b829-4ca5-a030-12cf4d10ddfc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f7895e59-ee24-410f-8dce-b664b1d522a5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f7aa4ec5-d91e-4b34-b5f5-9dcd7fd4f760.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f8344f8d-0e6e-42dc-ba19-37c3ef87abcb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f84ca090-c27c-40ae-b78b-11259eb5bdae.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f8581d37-6299-4bd9-92de-3c880cd26a36.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f866a8bc-7009-4ac5-a763-577498d10ee8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f8713f4d-6714-46d6-8331-711185b607b4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f8870a72-d6dd-4d7f-8864-14331b419cd6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f957e43b-e253-4e12-a727-98586d13360e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f958545c-946e-4fab-b909-076e36f203a5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f9ab562c-c73c-4cb0-a194-ca468e5cadac.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f9bd957e-42db-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f9c9fbe8-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
f9dd6d69-f5cd-4ed2-b63f-db3150e147c5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fa048eda-da6b-4d8c-94c1-7c089a1be0e0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fad35a95-16d8-466a-84de-8caaeda7dd55.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fb1c2192-c967-41fb-a2fa-42d661ff528f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fb235df4-782d-4a3d-aaaa-81cb03fcf3f8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fb25e953-af56-405f-ba6a-afc9460cfe1f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fb27fff1-ea60-4d91-8540-f3064de7591d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fb46066a-854b-41a1-99fb-1cd724f15eb4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fb604cbc-020b-437d-9093-9683e901e028.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fb843886-e385-43e6-902a-3744ea823a92.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fb8f0d4f-e14e-48dd-b693-6bd6c8f792cc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fbc4fbe1-46cc-4477-9d61-8db9a57fd7c3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fbd86bdb-6a87-40cd-a18b-47825dfa0326.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fbf40910-42e3-11ec-bf4c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fc39ed71-3362-479b-b27f-a2850065470d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fc7934a6-8c05-4df2-815d-bbe2fda27634.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fcc62e46-bc18-4684-acd2-6e588fc75651.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fcca051a-31a9-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fd049d98-03b6-4e4a-affa-427f37539f3c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fd16c885-17cf-4af3-90ef-31643665b30e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fd2b89f7-2ea4-42df-b5bd-e724b92205de.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fd72a8cb-0431-4235-8f8a-ea743edca778.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fd92784f-aa2c-4c51-9229-53bcdd833159.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fd9c15a9-8e64-4306-86d9-46d6856d9907.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fdb633c0-324b-11ec-9f6a-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fdbb43b8-b3a7-4d4c-8307-ed7a76866dc0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fdbcc1e0-7a12-45d5-a402-44c2e29b1761.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fde7fdfc-bd74-44e5-a349-f8b55642aec6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fdfb4105-38a8-450a-86e9-d2c90fa8a185.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fe00b631-62c6-48e0-89fb-4fbccc20f8c3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
fe129742-7bfc-4f89-ae71-7993bdb988f3.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.