Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
04b1ec72-3eb9-495c-9792-876ba30b7c9c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04b894bb-ffcc-43dd-b7f2-2081af10c3f5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04cb9f04-8547-4de7-aae9-d560702a1f7f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04cc6e48-fbe1-4a4f-abae-91199ab288ec.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04d26423-4b80-42ac-9b70-6fb63bf7be5e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04d5f295-f501-4dd0-9da2-1ffefda107e1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04e32c5c-1e1b-4979-9d32-1edb55fcac1f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04e53f45-e092-4757-9115-e5baab892271.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04e701cf-a6f8-4908-bc2e-37b967e5eeac.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04f33ed3-22ca-4d13-932c-034bef983c5e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
04febbf5-5208-46fa-a2ac-b55bd495fd60.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05094298-c80f-46a4-aaba-9942d3242309.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0520cf63-6bb5-4252-adb5-6eae07f28a1b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05214240-cd7a-4d88-b0fd-9a0c4f7e5d22.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05404e89-27d4-458b-acfd-355b34c30e2f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
054e581d-9ace-4356-a409-95b8a9b87fcb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
055485e6-dd6b-4a70-b4f8-140754259cbf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
055b1809-c29d-4409-a023-33782e803838.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05635910-2d5d-4a7f-8c6d-41bd6b1c013b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0564af5a-87b0-4eea-8500-97cd75063a9c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05698a29-877b-4a3b-b8c6-9c92e48a9362.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
056f2f50-9485-40f2-8f5c-fe13865e70e8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
057d5554-cfec-4140-ba0a-b5a6fb08c0a6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0583cc3d-486e-4982-978b-99bc2bde4b3e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
058be6a0-d0b3-4b2a-a7c5-eefd86c4bb6d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0595a89a-b2ae-442e-a5f3-f37cc0aa7b9d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
059c14d7-82d2-4965-abc5-38c01a5157d9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
059fcc55-0675-42f2-9bc9-cb2bb48f6334.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05afd9f1-3ec6-4f1b-8313-a57b6d1f7427.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05b068fc-aee3-49e3-94aa-95ba4237e5b3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05b7b8cc-3b7c-4b0c-87bd-606699c26757.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05cf983d-bc2f-4cc6-9f1b-0e63bee23205.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05d58e2a-771e-46f7-afc7-1e2d66898e0c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05e3d9fb-c7b4-41c0-95ac-82fbacb0bbcc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05f00a39-0542-42ee-ab1b-b45c71361a72.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05f72ccc-f3e8-4fc3-b0ba-a7591e579cf3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05fada45-948f-4802-a80d-8abc8a5a42ec.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
05fd6c4a-0846-40b9-bd42-fb2f6cb27bff.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0601a038-bd39-48c7-b64d-3b90b8ab16e3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
061c6df1-5617-41c3-9c9f-11eb500b0dda.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
061cde69-4d37-4b3f-bb00-0fb5f727d7f3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0620d493-583d-4bec-a7ee-c80a2a67a8bc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06330010-fe61-48f8-a775-3ec52751c7a3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06406184-b3d4-40ef-a3c8-c7712562699f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06446d0b-3ed4-4828-9dbc-857a8bed33a6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
064ebee5-b04b-499c-be9c-7805fa7494f3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0651bd0f-ed42-4bdc-99ad-da59e48e9c19.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0654182f-5861-4508-ae39-60850fde164a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0658421f-758e-4551-8390-676c18bdb870.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0678f368-e85b-4aed-9ef7-3acf727eaa9f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0680afc6-bbdd-4ffe-8bce-c2d4f7861851.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06848782-32dd-4f48-b704-01ff4a2caef6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
068c8930-3e8d-431e-a654-202d6fae9f4f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06a47b0d-c286-41ef-b98f-bc656abc67ac.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06a484d3-dbdf-4b69-93ea-2aabcb61b6fa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06ae76cc-f08b-4bf9-b40c-1a42b67c8b39.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06af3757-371c-41f5-8383-d330ed5d331e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06ba8a2f-33ea-422e-a882-63a98ada3893.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06cbef32-f017-4b13-b235-6adb6fa52eeb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06cc3360-2d44-4978-bdd9-0524c1296295.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06ceb933-b4f4-4953-ac7f-b7c05cd3d857.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06db993a-ad32-4eb2-af99-d42376f488f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06de1342-8ae6-48bd-a07b-77fb5d1be7bb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06eb41a3-045f-4902-bf85-25b67f0a4503.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06f16034-4b1c-4741-a639-e07f75ba4ae0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
06f919e9-e596-44e7-ba49-b76b08c5a8d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0705b32a-47d4-4379-b232-94ab999c4651.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
070801c1-c4ae-4882-ad02-cd903f880234.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0709bc54-8aed-43ef-be91-e7fdb5b66f67.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
070d6173-887a-46e1-b59a-f25d7c672a1f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07120e1c-77d7-4224-9a3a-3d92470f807c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07193b49-ca76-43f0-a178-19b574e80866.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
071a75b7-a5f4-4e77-b130-efa47d503e35.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
071d1068-b11e-4490-b744-090ffb435948.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07246e4a-2ce0-40e3-aa38-dcd9256188da.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07380499-9472-4df2-99d0-914fd5f018cd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07382b61-60cd-447b-a0bc-c3c466da5a4f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
073bb8f9-b1b2-468a-b754-45a14240b64f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0746ed0b-938e-4bfe-97ad-53c73316d9e7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
075058cb-9ee3-4aa0-b543-08b466288dac.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0756af3c-a03f-4ad6-b679-77fa5929dc9f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
075cdcea-82ec-41b5-a517-0524a6ed3c05.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
075e6fd9-504e-4f17-b515-1e15bca894c5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07700a65-ee79-45c0-a0d0-0ff6e939b60f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0779c096-affa-4dd5-b7ae-a306813463aa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
077d3567-1267-4110-a66b-eccf270e4d41.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
078717dd-87f3-4b09-964a-f32a4246bd4f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
078848bc-dffa-4385-b0e2-0ca205a7d980.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
078aa2cc-a583-4921-a8fb-f5d766ddab8a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07942350-b58b-4042-86a8-7292ccc295b8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
079454bb-13ca-4909-bc12-8f347b56a46c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
079fc2e0-cac6-4484-a40c-717b4ab2413d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07a485ef-7fa9-4afd-aba2-a186c1dbfa6b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07af9afc-db09-4751-8542-00aea2a3a751.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07b09fd6-0780-449a-8f86-6273b4838efd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07b335aa-ab4f-4f9a-8191-8a784350ee35.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07ca2eb5-9b5a-4d5d-8ae7-f1372450cef7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07d29bc5-fb74-40c1-bf02-8b56ff9df8d4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07d5e708-2f2b-49de-990e-1b42e8ebc8dd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07e02206-1e69-4e03-912e-abddbfe4bbbe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.