Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
15a7d942-e67f-46c7-a902-55e238e4e506.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
15b45cb8-133b-47c7-8511-34b6667298dd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
15c855fc-51e7-4572-88b3-41e23ed800c2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
15cad520-45d3-4bfc-b987-cce43b92f381.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
15d49881-59ed-4673-b106-dae7dcb5a95b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
15d846d5-50b8-4736-857d-99b70b19e200.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
15db948f-21a2-4996-bfae-204929efa0c4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
15df39ca-0c63-4dba-82f5-b4a30a492189.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
15f7ca42-b26b-4b84-9d2d-4ce4c32b4ab7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16107f50-72f2-40a2-8b8a-cb24fa6790f1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
161c81af-4a6e-489c-b956-ad8ba6552842.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
162933c5-8abf-44ea-b538-c04def904229.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1636f308-e953-4792-b685-7afe907f97a8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
163eef0e-97e9-4001-95b2-9d182c39f87f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
164328f7-8fb6-4da5-9dbe-4f9b963de2d9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
164fda29-7477-4419-a886-dd15bf60d1f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1667ca01-b763-4beb-8596-3d48321995df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
167fc11d-4f5a-4fe0-99a9-f62b95ea23a5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1680bf91-e89b-49b2-bd04-a2cb9a9446f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1683f786-0022-4628-9c96-c328b692eb52.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
168b46a7-2e76-4ef8-8c52-a3942e69c3ff.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16975775-15d4-4c84-a98b-90c5d9017439.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1698e0e0-c30f-4734-b53c-ab170de9b678.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
169ba66f-6676-4eea-a2e4-2638a24f48b1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
169bfc4f-1bf5-491e-8453-e1624044518e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
169fc0bb-da91-4e62-8398-95f2e8e654bf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16ab3803-1827-470c-b1a1-479cc2e424e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16b4f7ca-cbf9-49c9-a25a-1044b3f1c80b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16b64aad-4eeb-49a5-8687-10a78dd710c4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16b937ab-472e-43dd-9b62-690109b59f0b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16bd6d85-5cfe-4fa2-80fb-da45265b3d8e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16bed0cd-9209-4f04-8047-7ae94a28f66c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16c2c327-9cd6-46bb-a715-d91552fb7ee3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16d27ca1-29a7-460b-bfce-259c0fc3c952.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16df9c46-c544-40ba-99f9-ed106cafcb2c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16e360f7-3559-4b39-9fef-3f679be08f27.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16e93246-bfb1-4e85-90c8-ea00a08931d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16f30b5c-23dc-4aa7-8436-e22ae4a96b64.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16f7e69d-ccb8-41d5-bb78-8726a5c67f98.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
16ff2c41-78ac-4c78-ba80-2ec0cdc91388.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
170ce9b1-90bc-4f57-afd7-00d6614b7ef8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17108b41-bbd3-4bfd-b554-d4c7b05845e2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1712abf0-87c9-4317-873b-9a2a1647f219.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1724a0b2-4d3b-4595-a19d-ebecd776cce8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
172c9046-436d-4ab3-a8ef-6988d667d859.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1733b95b-1752-4f14-bebe-d0f0c62d565a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17394c20-4903-4bf2-8459-6c88a9384e44.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17399edf-db62-48cc-aaeb-28444cccfe50.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17519dff-fe7d-4e93-9396-1d72cc5058e5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1760cafa-30ab-4830-a945-5412a8a16339.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1766d2fa-bf0d-4d57-acb6-7084d0f3c6fe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17885287-d9ce-44bf-a192-bdde123b6334.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
178895d6-1898-4b45-8ddf-85ff4b2f4455.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17a0e90d-b14d-4536-ba68-60a0be31b29a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17a4d34c-ce2c-4fbd-917d-3c28680ea3a4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17a9feab-7aa1-4909-a475-9ecf65f91b6d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17bdf5bd-6012-48c0-a8d1-d53c2db47643.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17d1d3fa-3fbd-4f32-9547-8c2db658caef.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17db2355-09a6-4d68-b49b-7f79d8bd8120.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17df1f8e-f4aa-40b4-9dec-9094b868b3ab.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17e15f97-c659-4eb7-aa2a-012d0188c78a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
17f342ff-c848-4c85-943d-c8274d374ac5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18035299-dc8b-417f-8567-82e7784c3f43.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18073de8-2651-41c5-a086-0b78ec7c4007.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1811eac8-adef-48ec-9d82-d25e9ac7fce2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1814706d-3af8-48c4-b377-e87b0920ade0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18241b20-00ef-48c0-bdf7-ff2c8e2e5a72.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
182822f5-8ca9-4783-9f21-0d9e15ba833e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
182e9d9c-c3f4-458f-a3e8-8f3c58895dc6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1830506c-3fef-4941-ad03-6919f4f18c41.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1831f299-8d86-486e-8be0-6ec2893b7864.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1833bc8f-7fb6-4f1a-9a3b-9b4525644406.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
183c9e68-5cc3-412e-b476-71032ef107d5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1846e58c-30fa-43b0-afa1-f79b8ba1566a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18472933-d255-45ef-9446-ac134dedeb86.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18476e0c-1a27-42f9-a29e-6aaf98cb3d02.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
184feb9c-afa3-45ee-8ba4-6f742f3c27f4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18685503-7ebe-4074-89ef-10e97e144205.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
187c4364-6558-4b90-b57a-4046ec6a4298.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18849288-4960-4451-a5a7-79b586f23b8a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
188c74bd-896a-4ce4-bf01-f85196c493ba.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
188cb716-40e8-4c08-b75e-93369f389e13.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
188d491d-c60b-47de-99a8-b58f6faf6f98.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
188e5930-dbc9-4753-a176-691fb5a5c969.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
189e494c-8a7b-4862-9f94-5a3ed0f48d4f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18a4af65-5ef0-434f-8898-e02fb997c7f3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18b6f962-0082-4b0c-bdb4-4134ff2224f4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18c31f1d-bd22-4c06-893b-b369d5c66aad.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18c8cc6a-a312-4100-ac79-863cb1d8c2d2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18cac2e5-47c2-4557-903c-0e9dc1c9e3f6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18cc51a2-720e-4b3a-878e-4d8c50e4dadc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18d94cb6-d40b-4fc0-8682-d71469c55099.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18e22850-51fb-4d2a-9ff1-7c19e5d320ff.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18e81d2b-3a64-40dc-a75e-eed9efc80e74.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18ee3b5e-3260-4c2d-b187-cce9ee8a7e3e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18f7c81a-2e13-4598-8a84-e10ec23ca24e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18fe4bb5-ba79-4d23-ab32-19b5ab43dc39.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
18ff2cde-4d7e-4b3e-b73d-ca638e33f2d9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19021408-6b6b-4f9b-bad7-127234a4ae2d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
190ec665-91c1-47c1-b680-ab26ccbb9d04.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.