Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
191f7f83-8603-44d0-9d63-40b53770ba8c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19255aaa-1daf-47d0-bc23-8a51e5579c4d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19272d61-d314-4812-8d71-b0d4e4952de1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
192b5921-4f05-449a-9034-a24ca6a0ff12.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
193abee5-b24b-4a08-aa1e-395a621ddaaf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
194b9a47-6c30-4c03-89b0-f753437879e5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1950e867-f5fe-4f65-9855-c6fc733157cc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
196464b4-c7ed-41f1-a2c2-7b033ab7b236.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1979a783-3e36-453c-b0e2-6ccc28278eab.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
197d5f53-988d-46a1-ac37-9e741224b7ba.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
198656ac-ebb7-428f-912b-a9a4f2fd557f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19891ad3-c2ab-4e18-af7a-42a5a9d2f837.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
199ec969-26d0-48fe-b6aa-6b6c4177f14f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19a64d08-60bd-431f-a052-a0fe21a325fe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19b6a35f-8576-4e5d-bf4d-f8fabd59d613.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19bc8a65-0388-4482-b17c-93b526b27705.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19c23460-b084-46cd-b616-16e38fb5c525.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19c4ecd3-3917-4356-84e8-9b71f44d39e8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19d0ceaf-1e83-4671-8c7b-baea180f00f3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19e2bad4-0be2-47ac-9bac-005a3389a6ef.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19e40de0-90c9-49a6-b58c-8704c53bcc31.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19e94507-8cdd-4160-9d71-dc03faebb125.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19eaf404-b59e-4705-9a5f-39bd11e3c0b3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19ed0730-8277-4630-b94a-ddbea30683f5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
19f83128-890c-4830-bc0f-fa93700d6961.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a034f53-4992-4164-9047-f5a17b0f1687.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a0bb4c6-23cc-4b85-bca7-519070948dae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a238df8-e1d3-4f06-94f1-5fca814c8857.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a27511f-2196-4173-91e3-6664f156b777.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a2ac40b-0240-4d41-870c-52598cad1a0f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a49ffb2-cded-4075-a524-a17e19688feb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a504c5b-6184-47dc-950d-62d09c59059d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a55fbf2-dab2-4489-b24d-2824e082b6bb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a5b1bdc-9946-4b65-8fa2-2b55579c6509.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a6573e7-0838-4ddf-99b6-09c75f5140ff.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a6ad9a1-0f00-4c80-8e74-f51b53f065f1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a72adfc-011a-4a42-a6a9-8d430f0ddc09.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a7edea3-ce99-4b46-9229-b5840366cdab.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a7f9ce3-34f6-4511-b312-4b3d922f9710.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a80a964-ac06-4abb-9ec4-16894d752caf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a960efa-5ba3-4d87-b0c2-e0ff66c7ce93.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1a9f5396-35ab-4359-b813-e46faf8e14aa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1aa9f020-e4a7-4f58-bc20-e5dc565039f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ab22c35-1496-41a9-8b25-8f51035a6de9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ab813e2-48d5-40f5-9a4e-c843e0be6f0a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1abb0322-3bfd-41b0-b02d-68cee2005741.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ac0a64e-f6dc-401c-88a6-c4b6412e649e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ac2edaa-5151-4e9b-a5c1-c6f556668214.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ac7097d-aca8-4152-92b0-afc0b820932f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ac8614d-b492-4055-ab50-db1497c5a74e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1acc1c9a-b4a3-4fbd-a061-de518735620c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ad0af12-467e-4a06-b11d-b75aae3c207a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1adda835-a347-4f6e-af92-46a4f29e5a8a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ade7209-e386-4ebb-a56e-ca6265f728fd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ae05f6d-d442-4053-a700-e2b01c5d68a4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ae41fac-214f-402f-a9de-67ae2909a058.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b02e366-7498-47a6-8107-766898a9b78e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b19ea84-c220-4306-88bb-8f314f5b5dd3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b25100b-77e8-4382-9218-0abde3142efe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b382428-a6e3-4f6d-bca0-91b89f7c811a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b44f6a8-6793-46b4-853a-111429eda7cb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b45ad30-44ed-4186-8493-e39089985d3c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b4a2593-231c-40a0-b12a-6f10a0d84bfa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b55e7b4-29cc-4669-94da-830efb16e5ed.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b5e7a25-36cc-41d0-b34a-6d9c97957ce8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b5e8260-ee5d-4edc-bf6a-46ad7482805c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b6ac97c-fc2e-44e2-827d-b24d0f27d0f3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b6fd844-57d0-4071-96a5-02e53323828d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b7182df-d36e-49ec-a415-571e607b939e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b7c08ab-40e8-49bf-b0f9-870b12633dd1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b7cc566-46b8-45dd-9f67-bbd0cb2ef370.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b7f8bf8-d3e8-4655-a456-50ac881a3464.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b8e07a8-360f-4125-9f7a-2d2d3f479b12.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b8f578f-dcb7-4a87-9aab-dfe51b24811b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1b90c9f0-95c2-47ad-a15a-94b9da4c1f13.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ba2f124-17ac-44d3-9d98-7493a3a94944.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ba46b69-d57e-44d2-938f-7022ed5529e9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ba51f94-fe01-4e79-860b-c69ceaed028c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1bac33f5-72a9-41cf-97c7-dba598376472.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1bb067fd-1a20-4ce7-81c0-acfcbb4c0e02.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1bb07411-e1be-4116-8698-909d4df032c5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1bbabe4e-7acc-42ed-b787-9533565437a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1bbb38f9-9aef-4a49-a3eb-0cd16ccf5a0e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1bce80cb-1bf7-490a-8bde-26555b7912f1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1be6e4b6-e3cd-42af-b1f2-e97a66dad5d8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1bf7d148-7b18-485b-b70f-b1c02038a7d2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1bf8e740-f0d1-4c62-9b5c-6d2cf305878d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c016f47-8ee1-4500-b677-f955b814dcd9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c1be428-0692-48a0-b8df-ead4faad8764.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c1d172a-a019-44d0-935a-79513a62f1b1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c1e3fa0-54ea-4349-a1b9-525cd1bbc14f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c243138-47ef-4cbf-ba3b-7a4130004da3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c244402-98e4-4d92-a3a3-f597fbdc00cd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c3766e0-8980-4455-835d-6724cc9990d8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c39ac23-19ca-4fe7-a670-f30edc9fe52d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c4142ba-e46c-4d62-a4c4-178389479590.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c55f23f-e51a-4b00-922d-5bae47d1c77e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c5635ea-9640-4708-bc4b-3488590e46ae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c5f101a-ca98-47c5-b243-fb58458d3277.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c61a820-2ea3-4aa8-8312-89cbf38fdbe0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.