Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
1c6e223a-5d46-4186-b2df-7eb32e0045dc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c710bfa-984c-44cd-b6ab-d6ae01f571f0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c7ec88c-a178-408a-8300-0e57552d6912.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c8a2208-e529-406a-8789-c74af3e9b115.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c91aee1-0b21-447f-b405-2676a485fddb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c93575c-b219-4602-9989-91b6175a9560.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c98ec99-1a5e-4cc5-924a-a96e3f75fcc6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1c9b8141-9111-4b27-97ca-8ee5be029be5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ca965e1-b07e-4b42-ad02-e2146bfc12a0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1cb1fbb5-1471-4be5-a031-b86bd8349901.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1cb716e0-239d-40b2-82ba-b598aeb9c84b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1cc37870-7e09-4501-8216-690856dfae8f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1cd4ad52-c87e-46b2-8865-fa833c93e652.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1cfe6f8b-4fee-44e4-960a-ed238cd77e46.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d0fee74-4373-4883-8fee-a75d42def145.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d198474-35df-4772-8099-40688bb7f7da.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d31cd33-8ee9-4190-abee-8cc553b99d65.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d386147-ca92-43c8-8380-7533bd2e0524.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d3a2917-041d-4e72-b0fb-789eed0a6e1b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d42a321-49ff-4351-962e-5e923d4f2381.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d47e4f6-d9d3-4c66-b2e3-d1d2e2b3b7d1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d532f68-4dd2-4531-9272-1a6bfa9127f0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d5bf8dd-e98c-40ec-b03a-ffb12325f2a8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d736f71-1377-4021-abc1-f5557a19da13.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d803ac6-eb31-45cf-823b-41743533879f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d85fc73-10e3-4320-b054-79fc833509df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d910ea9-8b7b-4b10-9e91-19f9fc165519.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d9831d8-f869-4ec6-b7a4-f5a619624621.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1d9f3e8b-e23a-4ff5-8a83-e2cd113b8e89.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1da5843f-14e3-4f50-bb15-56299eeda6fd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1dac97e9-2f69-4885-9a43-499a95ea4d7a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1db3c11e-7650-4fc9-b69b-996c658f4946.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1dcfa28b-be77-49b5-b4a5-a0b8caa346d3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1dd3234a-e4b8-409e-b966-64911a4b3aaa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1dd7995e-ded1-4eb7-85d3-05f09ef03308.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ddb5051-9c1d-4c2e-8e22-6badf131fdf2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ddbc3c6-d2ef-438f-a3f8-46a594d76fdb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1dddd19e-706a-4e26-b875-367ba4483a41.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1de7013a-05eb-4317-8a79-1c686d0ce909.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1df2f9c9-3a97-4e04-a305-e39cc5ad586e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1df3e619-df45-4e67-94ac-6da4d4ed43a6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1df3edb8-3507-4923-b827-d2ba27256d62.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1df8c826-ec97-4dea-87bf-a7d18e7acfd2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1dff0405-843b-4b46-9d06-0865eeb1c9b6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e04612e-15f0-4562-bef5-1aa4bbb473b5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e09d98d-e147-4422-99b7-7d3154c844dd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e116920-1294-4ffa-9dc9-41e916ed47ad.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e3c7b67-efb2-4cc0-ac86-8a7c296a33b0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e3e1c23-d9de-44bd-900e-e0efc7c6959b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e3e6042-7276-47e9-a055-a3381e20d7f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e462211-c220-4e68-b9a0-95237535d947.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e555fbe-ea5d-4322-9641-e3efedb92614.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e57103d-2524-4393-9793-7ded80009fea.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e5e1df5-be8f-488b-9087-fe4412672c59.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e613eb0-35e9-47bb-bb24-2cabbb683ced.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1e9468a0-6c27-4894-a825-0054824fdba6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ea18cf9-4597-48c9-800f-560bc65763c6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1eabbf95-40f1-43ab-a5df-a66976366fb9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1eb88b36-4a85-49cf-8428-fc067580517c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ec86d0c-7dc8-4d77-8248-4834a52d388e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ecda8a5-5c52-43c1-a444-51db9908713e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ecea4b0-03ca-43e2-9422-e2a4e2195fb3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ee53675-dcce-44f2-9ebc-f5a9a109d022.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1eec743b-fc40-4832-97e2-6318d60e64f8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f08cbcf-90c3-4fde-b599-2ed7faef1e6c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f2990bd-c6ab-4f7d-8f03-968869eed888.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f3caf2a-798b-4327-81cf-49f620d6bb89.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f449343-2d6c-477b-81c9-1e6bd3bb8cdd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f4519b5-7c35-4cf8-a075-e83871cba91b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f4c3c0b-7deb-413d-b832-216e21ca8192.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f5575fe-1abb-447c-99eb-df70dd46d4f8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f5b4660-13f0-462a-9ca4-8d329f106c88.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f6f0760-c3e2-49ca-a565-7a77ae47f0fb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f7fb3f1-90c8-44ac-87c2-58f11c49f9f3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1f959959-b46c-4c42-a4b7-498c3d464f60.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1fa9f775-9cb8-4871-8637-5d200e57dff2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1fca4e42-ead2-420f-b77a-f321eced0973.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1fd686a7-b447-447c-bfca-04c9f11b1995.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1fe51780-2bf5-4bc0-8eec-d3b1f9d25895.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1fe54118-0be8-4e25-ad8c-6d39ebc1a6ce.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ff1e7cd-05f7-47b5-8db6-f9fdd849437b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1ffe3fde-37bb-43f0-a12f-8e30972ee6f6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
1fff475e-76b1-4a1e-9267-591adfc59146.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
200f8f02-bed8-4735-b7e3-dc7cb27193a6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2010aeba-fbd5-4a22-b1ea-b5031b8701c2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
201ae767-7579-48f2-afea-1071de563a3a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
202227b3-f659-4a16-bbe4-76b535fcecd6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
202951d4-f9e8-401a-a315-c5e724b8d9de.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
202c9785-a516-4714-b70a-a6b393850bc7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
20339799-3f10-4580-8f03-05573dfcb943.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2038dd1f-4b32-4fb8-ad0a-ddd3448186b5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
20395c4b-5591-445b-866e-8b7fbfe4d765.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
203d29c3-9d99-4434-a3f4-c6f08cdd46a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
203ef98a-6e88-46bf-8fe7-78b0629e8983.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
20412733-d37f-4cbe-98b4-f7b0908ebd6a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
20474c61-3795-47fb-9f23-414fad47a56b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
205378de-410e-468e-9717-de41a646a8dc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
20556b2b-c4f3-4efa-a6d7-80a5abdc25bf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2057a938-b5c7-46e6-bc93-810bbcecb270.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
20595f1f-4feb-4ba2-95f7-ff67dea536d8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.