Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
07e2eeee-b5b4-4449-8b0e-5919396603ba.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07ef8141-566a-4772-806c-625a2d2840de.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
07f4916a-7432-489b-9b1c-8149e77dbcc4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0806ccf8-96c6-4061-9274-f8df4d92753a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08158ffb-1752-424b-9bd2-70d85dae0cf5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0820dd2c-1654-4a84-b549-af7328571c56.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0821995e-0a81-47d5-9d72-7f1c724acc59.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
082b5e13-1ea2-48e7-ba53-30c7790929aa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
082ee929-57e3-4fec-8f87-72e0117eea40.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0831d39b-676e-4b31-a5d3-7b0ad7f8ea2c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08486d37-7f9e-463a-809a-9226e362cebf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
084c5a63-ed10-4e12-abc4-26cea1819db6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08523a03-c760-430f-a5d0-40a42223ddde.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0858077e-7033-4df3-9dd2-00f4dbb317fa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0859a79a-e7b0-4d4a-92f7-9cf194d97035.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
085b1838-b7cf-4365-af0b-d77fe50f1a04.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
086722cc-be0b-4c96-b1de-6bed8fc3fa0c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
086f577e-479a-4a45-a6d2-64a86623150c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
088701a3-6084-4b1f-b189-eacb0927f75a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
088a0ea5-5e54-4adb-ac2e-fb43d60ba1aa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08904b39-4328-4c9b-b13a-a732f8fca110.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0897b79e-1bf7-4788-adc3-e73535cf7c1c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08a5425f-f09b-4076-b061-b8c364b2ea52.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08bee469-3445-4dbf-b02e-14e0f1b37806.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08bf4eda-c8be-478c-b4dc-49966d2a5039.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08c2cce0-9f46-4f20-bd5a-7db24848ae67.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08c90d3e-ab96-482c-a05f-65fc2b2d3ac7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08c91daa-2a55-4d60-a567-2c47baedcdb1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08cb612f-36f6-4e58-8881-5a280ec1f74b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08cff14f-7241-4bd1-853b-90f1ca7ce33b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08df8995-7465-44f5-98b3-b73124e24833.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08e299b0-09b3-4383-a3dd-cc675a2d432a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
08f56a52-7c4a-4dd2-9622-4d56f18483c3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
090569c7-e606-4adc-85e3-b32b350da334.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0908aedd-daf9-4a80-8e57-3fc7c1ecf91e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0920925a-b38e-4bd5-9c24-f8fba22d5de9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09220b96-d491-4204-b4b8-863825e529e1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0922f27b-2e95-4e10-a69e-1ac12c7f110c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09235bc5-b654-49b7-8eb8-55b0de3cb949.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0928057f-a700-4446-a113-733a7ab85e36.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09294caf-61d6-486e-ab92-18c22cec79de.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
092dc70c-9a99-446a-bab5-79f492e81b39.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
093ccca1-60ca-4ce2-b4ef-0b7990941c46.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0951ce2b-db92-4ba0-9879-b4091cca290f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09570699-a935-48d2-abbb-3b01addebfd5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09594547-4c7d-44ca-8b4f-99c4c8924d63.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09613791-c8e8-4ba7-9edf-82437ac17565.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0969e011-5ae1-41e3-bb94-68a37c064f5d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
096b6aee-e5e3-4002-af7c-6a5aa293fd2d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
096de06f-f623-4f3a-8ee5-47344a1f08d1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
096fb782-f1d8-4a75-a39b-6e8d1fcbfb87.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
097ad16d-a49c-4bb6-b3b1-4eb5eb346edc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
097d5a1e-fb33-4e2f-a6e1-652aab19de8a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
097f5f62-0bbf-48aa-b1ff-0e976c828004.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0990d615-3a47-41d4-8f07-e6ab26142a62.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09962f97-bec6-450d-a51f-948ff9ce0842.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0996d17f-98f4-4314-88db-62e40c36b1ac.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
099ac07d-884f-4fc4-a128-3a9bc39229f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09a59c22-4119-49f8-b510-b65bdc44d0e3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09aeb03b-b1c6-430b-8e71-108d6107c266.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09b026b7-683f-43f7-a63f-2251c0a6f6f4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09ba0069-c3e3-4731-9c99-3f0b4ea0433e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09d0817c-ccf5-4fa5-ae9f-71265b2721bb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09d38f54-4382-46d1-8a7b-63257af40237.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09d79108-a7ec-4982-8e2c-63f73ddeaad4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09dc669d-425f-4283-9a69-5a899a6745cd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09e51009-f6a1-4e66-9632-2db23353bd51.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09e619da-9f9d-4024-a1a7-c6a2ffb4b99f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09ec1503-1179-4468-864d-ef7ab5412998.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09f05991-598b-4bd7-8ce9-dbb769a954d4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
09fdfd14-4265-414d-8b30-2a9969e6b08c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a07d81e-2dc6-4900-b528-63c061abfed4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a0a9d61-2dca-4f74-b80d-cc012c635b93.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a14f596-5a42-400e-a813-5bd1c58bf4f5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a18cc73-36bc-420b-8658-2d8ea59cd1ed.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a251c34-14cd-4018-8ac4-1fc874524ebb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a2b6778-b68e-4ee2-af30-1c812cf0213c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a2dca7a-53f3-42d8-8ab5-fbe6ae5e9691.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a31f102-4ebc-4efe-b529-5d3c01f91f15.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a392d25-54e2-47e3-b2f5-a9e1d29536d1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a3f5e00-9574-4297-b74c-787a5cfe5406.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a486afe-4b4b-472b-b5ec-5b2f5ccf2a83.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a523ece-af2f-44d6-91a2-638592b929a0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a5c0bee-f706-48a3-b045-cdca64b96adb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a628fb2-26f8-492f-9f84-6339bb207203.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a7ae198-50ed-4ba0-a09d-db56bce0f322.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a889075-9302-4df6-9829-a2e5830f1a2c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a938bdb-4456-4d87-b31c-8f44ef1ebdbe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0a97c4dc-dbb3-4a28-af93-22a7a272984a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0aa1e544-a89f-4e41-b958-1b655da0968a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0aac6887-c2f3-4442-b901-14e5a8da5519.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0abe937b-3e2e-4030-a5a6-cb99fdb2c7da.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0acd34be-c523-4128-af21-c44e64c84957.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0acda37a-cba0-4af1-8694-40bcfc2f4ab4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0acee580-24ae-4991-80f5-7964caa8f887.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0af0eb6f-5cf4-49e7-af2a-f54cb08d68b7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0af99186-34c7-4775-a5d1-3315999c52aa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0aff0d08-7dcc-46ce-8081-28b82d7fa0e8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0b028794-80f2-4824-b1d4-c6b04e701d36.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0b0fef26-f0af-4b02-8ca3-5aa5d459f996.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.