Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
0ed62d0a-a33a-4515-bdd1-b6eca9c94d79.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0eec4f92-0553-4daf-ae29-341d1317909e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0ef296ba-dd21-425c-b131-b6b936aed861.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0efd41f2-39f1-430b-8fde-cf594e10f4cb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f04dcd7-850f-41c8-a4ee-15f4a6030897.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f115573-196b-4884-88d5-a2c28413821a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f12eb8b-a6e2-478d-b68d-f4926f63a842.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f14011d-f621-49bd-b213-a35f9509674e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f16dc66-0de3-466e-89f9-ecacd6989b0b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f32fd75-94e3-4ca5-85f5-f90dcf5927bd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f40932c-e020-4005-9301-7c95a7c13abe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f4e3ef9-e427-4998-82c8-bed3f0a6b749.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f519d52-fef8-4143-9428-3ceda1a24971.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f55f93c-2277-4c05-a2f5-f11f6389e3e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f582cc2-c2cc-4348-b1ce-7ffaba4b57ea.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f583def-3157-4240-a9f9-17572ffe086b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f61f1b9-a0c6-4bcc-9a67-e35e54ca397d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f660ba8-9247-403d-9a74-fabed199daa2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f6a13f9-2d43-45e3-a3fd-aad803d605fb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f71047a-999a-47d9-8a16-9497b37542cf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f7bc2d4-6dec-4813-8787-205cde0f6462.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f8c2055-7f81-4717-8418-2d3432004aed.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f8ef347-27b9-47ae-ad05-4efd33e5e4be.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0f97d55e-b174-4c24-abd0-35ca28cd36b7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fb42d57-4f84-4150-939f-4542dcfa87b8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fbbbcca-a00f-429f-a959-99d30165936b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fbf3593-bd9e-4105-859d-522d5a341dec.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fc975be-0805-452a-8361-d0bbc4ed552c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fc99386-49e9-4673-ad4f-1d72a6758b95.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fccb105-971b-4d33-83cb-f080bc2d03c1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fe2e2f3-2af3-4a32-90b5-5858b44b9e93.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fe69ee7-cd3a-4362-93c7-2effec17fdc7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fe86c0c-e23b-4b6c-aeff-49f516b523c3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fe884ee-1f37-43c0-8df7-180c180073f9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
0fec3054-576c-4791-8d67-2983ad528472.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10011995-882d-416e-a6e7-1a38a8772297.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
100993f6-1016-4257-a1e5-d90a666f4416.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
101745e3-34de-4177-9f86-40e2257410df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
101781a1-f721-4282-98c8-6f3e84ad3e79.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1023e1ab-e0f8-47ba-850b-5205a9345be8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
102f50c1-9334-4153-a1a3-80460f10704c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10378a3a-7a66-49ae-8d2c-ce8a68d8272f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10470937-5cf2-4fc0-a537-a0dc1af4cd4d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
104a1e1e-a07e-4cb1-a724-4e70fc1bc2f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
104f6d3f-d8d4-4912-9572-3ff9ecd8cec4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
105126c8-b1e9-4a2c-83cd-43439493a010.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
105c742a-1a09-4089-b496-40bbe580d766.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1072e3c5-8906-4760-8b4e-9df04e33e6ba.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1078cceb-0042-424a-8c4d-7ebd62146778.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
107e0554-0af8-4333-8580-4e819faadf97.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
107ec410-856d-4f9a-85a6-c1899a2cddd5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10818f91-0625-415b-80ca-918dea4ad798.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
108b27cb-32c6-4821-a1e3-a79c8b04e0c9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
108e6454-3592-41c3-825d-10214f5c30a3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10921c2a-39df-499c-8688-aaa058a5ffb5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
109316a5-dd01-4dc5-89f8-c6728e94ab42.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10971960-a528-49a8-a3c7-676b59265b1a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10a1a75d-a628-44a0-bfb1-2174d499a562.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10a97fef-b291-4199-8ed3-fb983d1f475f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10af7000-e1f9-44bf-b65d-9a43c04ab68a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10bdebc5-2e76-4cdb-ac2d-9b3872ddb4f0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10c84d0a-99ae-40ab-9866-8cbd57015eb0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10c8c847-4b0e-4d2b-a5a1-af33b3e548fe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10cd933e-d0be-4f2d-85f4-56f030aa43e2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10d473cb-dafc-4fcd-8280-df8f26c61cfd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10d6bba1-13d3-4b09-88d2-b47a8375a127.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10d958c3-d26a-435e-aae0-d6cd29053c9b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10e552c1-fdd9-4967-aca9-e4febcaaccd0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10ef320d-18ce-450f-9ba4-7f5afa2af9a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
10fa8b0d-20fb-4d66-9a42-95fd89f71a17.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
110b3b7e-f308-4eb5-a87f-2a046b8c8bc4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
111e0b88-3d98-42f3-b661-ddfcb2e9c2fa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
112ef6d8-3c01-4f1a-921d-5925c54c06df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1135cba1-15d2-405a-ba0b-dd46d3031307.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
114ea5be-b381-441d-9d88-1bf3bad3324f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
115fcb70-2707-412a-b009-0866582b3a6d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1168314b-5bfb-4da3-a73d-1ce41e802370.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
116ee313-9095-46df-b84f-faca2e60aa0d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
117045f8-ede3-4e88-b728-c3d136ad1c24.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11726af1-415f-4d20-b99c-c1b9cf2deadf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
118d4db4-8137-40b5-a96d-dd68267bb369.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
118d7c66-874e-440e-ad05-7670bfbd1640.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11963cba-3ef0-4741-b007-23a865344a6d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
119e215d-89d5-4599-84f8-0bf61162236d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11a4055c-3c87-45ae-b725-f44c1b1c6fca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11a496e4-4eea-4d86-91a7-c13989b3e4b9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11ad049c-92e9-498c-bcde-5498b6a53af4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11b34040-e768-4659-b850-70b4be8d476e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11bfcd39-bef6-4701-9bc2-115991023e3c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11c5e0ca-5042-44c3-afaa-f3e433fb3338.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11d4de8e-7c40-4e14-9e85-3ea0bcd1c161.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11dc46f4-c96b-4658-b4f4-1631dd250ccd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11e63d7b-bee9-4bcf-a82e-9751390f9223.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11e64ee4-e1fb-4d71-9f8d-4f6191bacca0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11f3180f-0e36-4869-87d2-bdd04b651c12.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
11f9eb87-e6ee-4b97-a031-0974394cbd56.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
120225c1-70d1-4319-aed2-84eec214cc5d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1205a81d-c204-4793-9041-b52640edad4e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
12198e7a-724b-454c-b250-1fcf24e5d5eb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
122804ec-5adb-470e-a904-2ee1f40e7c5c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.