Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
23f931ee-2914-4cff-b7c0-9165e86c3f0a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2408e7cd-0fa6-4683-9c97-dca3ad4563eb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
240c99e0-cd6e-403f-bdcc-8cb05d270cc7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2419fccd-8abc-4516-8ad7-5b4276e601cf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
241acc17-9ef1-4e02-81ff-3e596cf72e8a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
241e79f8-c26b-4ee9-9c40-9a63c2715745.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2426c3c8-395c-4639-8be6-23280657e5fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
242d360a-b47d-4dfb-81d9-ccc319577137.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2441ac55-ea8b-45f8-86f3-80d8e49fba7f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24423b06-d140-4b05-83ba-f322894b2d93.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2445c76c-790a-4e7e-b7e6-4747d52cf537.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
244e1c84-9634-42dc-a93b-87e60d28ada3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24516e72-19fd-4aed-9843-7da27e333d1c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
245967f0-0e66-49e4-b819-b6111d8a54b0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2459cd91-bb46-4335-bb09-f60e83dbf0e9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
245b0c13-e71f-492b-8cce-708b2128fe0e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2467cc77-f90c-4654-8132-a626755425f5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
246a3e18-2fcd-4b62-88a2-de9f5db8bf81.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24715d1a-da42-4a7d-9d0c-9a16401c947d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2482aab4-76ce-4bbd-9a86-b5f8565aeb1e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2482d8e4-2995-4436-88f2-a3361819530e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2491ca14-b0c5-40f1-9ac4-faa0d8e59def.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2491f1b9-3462-45fc-b10a-da776d79403e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24999cba-440c-4b77-b4d7-046ccacb8f9c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24a02fb4-04c1-49f5-a7ed-3de72df2ff6c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24a525a6-3c82-46e7-aff6-582cf7ff0c16.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24b6c68c-61db-4f01-b4e6-d037e2432155.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24b96a85-14da-4197-a715-4fdb608af8a4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24dadb86-8fc3-413d-a413-7f7a1845c4d2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24e6dd41-a208-483e-baec-e8b80402da2c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24ed0f8d-133e-4e40-b78a-6413bbbf83c3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
24f70c6b-ce21-4dd4-9069-a15c0a2ec239.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2505a71e-d666-4783-9951-3c29021e4a9c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2523a442-5471-4621-b6ac-77f9c8c29e73.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
252a1c3a-c0f5-44e1-8154-7bcc68a162a5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
252b8993-d27f-41a2-9b95-43c31b884a0b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
25304aa0-9294-4793-be4a-0600811d5530.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2536cb51-61b6-4028-8e74-a128c06a73bb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2545ad58-3db7-4507-ae94-742626af1238.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
254713cb-36de-42b6-88c3-fc7281699a09.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
254b82ee-103f-488c-8ff8-ddba62880ddf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
254c5e0d-165f-4996-a47f-519bfd0e3d9c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
25655d17-1b14-456a-bede-b89f30081a42.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
256d5914-2cf8-4ae8-b99b-f6f2a8a76835.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
257c5870-6394-446c-81f7-635bb8478781.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
258f27c5-e171-4f2d-b6c3-f286c9868727.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2598fc63-1cae-47d7-aa57-82ad290f8d3b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
25ae7624-70d7-495e-96b6-e7265b3be670.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
25bf2468-34a9-4ef6-afc1-21f62c3778e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
25c5c1e0-4e12-4604-b1d1-77fec7e236cb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
25cdb24d-2366-4024-ac90-fd69ccc1c0a8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
25d9b015-69c4-4ba7-8fe9-9dd2b9aff152.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
25d9fb75-d86b-487f-a7e0-fbdbfc967c6d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
25fef716-d5fa-4eca-b7b4-998bed29ae65.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2600609a-a903-4063-b821-e969201c835e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26018c20-0cd0-4f68-aaa8-72d9253b54ea.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26062aad-b0b6-48fd-93b7-4080efbbccff.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2606a2c1-8219-456f-a341-eb44c217913a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26076e87-e444-4be3-b176-30943934dbcf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
260f3e23-4be6-4f20-8024-dba1dd1e0bfe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26184d9e-6433-4181-af75-68ec8ea78675.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26265545-ea97-4685-ada3-1c4e0536f4a1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2627f465-2716-48af-ae41-d336fc15ee96.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
262a3cf1-9433-4174-a9b0-3827847539b1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2633603b-efcc-486b-92b3-32f161112fb0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26339ad9-905f-412d-be32-02c7d5d06fe9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2633deb8-a11e-4253-9495-4ba9ac0adaa8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2648d8ab-6d01-4f73-8fee-cf1c95c40f9b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2658d3aa-4116-4cf8-920f-4a7559f7c76f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
267b450a-a773-4fcf-900c-23682193b513.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
268a9ace-6c2e-4d47-8944-b6251dfbf2fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
268c8440-74a3-4adc-ba89-6edcb6655cc0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
269689f0-6aab-40b5-9513-58c493560b32.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26a84c35-16bb-42ca-9955-a0b4aab72cdc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26ae0d8f-0a10-482f-9049-fbe7905d2dbe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26b1b00d-30a0-44fc-9559-962bbe118174.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26b4e4aa-ada6-4324-a3a2-09df8566f3d6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26b6d249-ca98-44d8-b825-ebfce4ee9a66.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26be9c45-eb2a-4287-846d-fe3c58313555.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26c11479-76fe-429b-960e-b336456558b0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26c3eff1-40f4-4b9e-8ff6-679a03cd3168.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26c519e2-b65a-4b29-9068-7e7a5aef96ee.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26e14ffe-ad83-4332-a1c5-1d06f20798f4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26e698d1-a392-40c2-914d-7e21b7d3fc3b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26eaa138-38fa-4423-abfd-6edbbf8c5689.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26f83ec3-bd91-470a-8442-b1a6bb4e85ef.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
26fc35cc-9db1-4d51-9f04-59ac5f72604d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
270fc3ee-a353-4ef2-af93-be582a91e430.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27152ea1-e410-42a2-857d-e5979fac7909.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27163863-f91c-42da-9370-5cd488b01631.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
271665a6-1706-4773-94e9-87dc471e6419.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
271691fa-5b07-4d92-91ff-34d7c96c433a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
271a48ef-3465-4508-b1ce-c14f530e4a5e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
271b3f24-934a-420c-846c-d6fca5db505f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
271ce82c-678b-411c-9452-8b839a3cbf0e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
272a28da-27b9-43cf-af31-36c5a0b61701.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27316113-6411-4c45-971a-f59f65986b2a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
273da6e9-97ec-4b1d-a643-5de9b63f902f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
274145f9-45e4-498d-8a65-9ef28312fedb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2747b653-c659-48a8-a6f3-56f36a40d8be.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.