Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
275109c7-a7e3-430e-bb2c-788739476070.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
275279c9-a8a9-4913-a7aa-b93607c267a6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
276c2716-d5a1-462c-bd3d-63330fcc39d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2771f1d6-7a95-4907-b8bb-abdc4d103109.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
278143eb-340a-4700-a38a-4d89444cc8bf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2785c494-3924-45f4-927c-18b54708ccc6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
279011e5-746b-4c87-9bfb-0a8480d2a94e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2790d91b-7b7f-4281-a531-c246708e30d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2792b4cc-6da4-470c-891b-42e5c2b5faa5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2793c021-1b7a-4a3c-8ecb-c20c81090056.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
279d3d6b-3916-4991-8251-7da3dbdc5806.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27a07de3-796c-411d-8ab0-1aa20625e59e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27a0dc6a-21f6-4c4d-8a3d-5fa2359d1677.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27ad2213-7063-48fa-805e-3ceecbfc3eae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27ccde3a-ccbd-4233-86d9-2548b2881e41.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27d9e126-7c59-44de-857b-d48dff379878.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27db77d9-e6ed-4fba-b913-fea6fb37718f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27df4cad-2430-4d14-a739-3c51cd6a97f6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27e1db21-8578-4e5d-be1e-001c7876dd8c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27e4dfe6-0f72-4285-9b36-c24c3f49a83e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27e56406-17c3-4986-830f-6743c7ff4ed6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27ea93e3-1feb-4b8d-8f80-e7e8f6910933.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
27ebaec8-14e5-45d2-8614-d94c70a6b3c1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28050f71-6ed1-48a5-94a7-64ddf66145fb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
282b10f5-d80e-4a49-be29-bbf6c2ae48e7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2833e640-7fc1-452c-b142-5d147c751f7e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2839354c-7c58-4516-88cc-a65d2c4dc1b2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
283be109-2526-4378-8041-47e0c31e5715.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
283d562f-3590-46b1-918d-95af26219db0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28424238-0426-4ef6-89d2-36c4b312df4b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
284754a2-ba84-4464-9897-0d06f536ccac.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28586037-9dff-488d-b488-e57fb06d67f8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28616970-e962-402b-b5e2-a63e3699ebf6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2869e038-955b-4d87-bcb3-6249299d84e7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28769896-4894-45be-a362-ee36cf95c52c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28821f96-4f7e-4e0f-ad63-163b48fc068e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
288953c3-f438-40b8-8516-6b8b728975b0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2893ca5a-5f52-4130-ad54-dcfac09f9a00.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28a25a35-60ef-426b-9430-21727c30e1b6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28aab571-45b4-4731-bf4e-326717ef7a99.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28bafbac-c98b-408c-8cdb-97f0f829b232.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28bb0085-5895-4f5a-8297-90fa8fc3570d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28cdeb5b-4b61-47e7-875f-800b84d33b69.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28d00fd4-c51d-4bf4-9d22-05750acfab57.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
28e44a00-87bd-4740-9797-aeb9fdb74e84.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29083f66-63cf-48a8-bede-acf662a39bf5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
291112e1-b6ee-4172-8996-b0c59e9180aa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
291c1ade-154b-4bbc-b2dc-db565d580ff4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
292203a1-d309-4bc1-ba02-bb42dd9b74d8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29226f51-d205-4362-b8d9-cacc26fe244c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
293ce25a-f80f-4c2d-8462-228eb00c2fb5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29412e19-f2f2-4d12-8d60-b289519d3804.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2950641a-31c5-42fc-bb54-8e161b1467dd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29526470-770d-4e7f-a807-524c67827a69.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2954ecd3-ec72-4b41-8215-ba06b2a20013.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2958c4b4-c0ab-46e7-ab2f-8d141bec67b2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
295bec5f-a03a-4947-91dc-30abb0a10046.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
295cc542-86fc-4c3d-8e06-fc2ff1b4c6cb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
295da8f9-2dff-427d-9d95-48ab4ecb816e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
295e4559-c015-4f45-8b0d-300986de6087.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29621283-1605-4ea0-b6ac-9fcdd98da1e6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29741867-a6dc-404a-9b28-3d93c99ff7ce.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
299744cc-c292-400c-b14a-0ef954752877.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2999843d-17b8-4f61-b932-ab00ae777e1d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29ba3cf2-3e9a-4d28-9617-7462072539a9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29be0f03-1f43-41c5-969c-63caeb062d19.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29c5b9c3-282f-412e-823b-0b2949202778.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29d3ed9a-374c-47c8-a519-a331885409c7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29d4fd52-9aa1-4cc1-bed4-20d44fa514a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29d5a9c5-3710-49e6-872d-92bc540b5633.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29d994a7-29dc-460a-b542-a7d98b7238cf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29d9a573-6b27-40ad-92b6-ab529a43851a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29e957dd-1d2b-4220-9300-ea517e683d11.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29f3058c-4062-4add-9386-ea9a24da97d2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29f3e255-da5f-49cf-b43f-86836f65c014.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
29f7c5a1-af3b-4193-ac90-8b0abaad7737.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a03ef38-4da8-452e-a5cb-1be6322fa9f6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a0932e0-8f1b-4bf7-88a0-98eca12ae91f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a16745e-e467-4fc1-816a-b648fc7fda5b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a17efd1-7a5c-420d-aaea-b398d30ae7bd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a1c9d71-d7ee-415e-a188-8fc948d959ac.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a1ea519-0dce-42ef-832f-93aca63b4d93.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a203099-1b46-4d47-a962-a9c421917eb3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a24622a-129d-4584-bac8-251b9acc8fa4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a2a9355-9822-4c5b-94e6-8c4a48177f2a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a2eab64-97c7-425a-9d0d-0c91210706c9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a301207-de22-4344-8e81-b9726a5f3508.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a30b25a-d74a-461f-be7e-fce3c0dffb6a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a396c00-e302-4ffa-bb29-2488ad5c5c60.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a3c51f7-cec0-4f7c-814d-0b9e9a9e2c5c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a3d22e3-641a-4d34-9aec-a258fb4390d5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a43db86-9b2a-4129-b8bb-613cab62c4ea.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a4579a3-82db-41e7-bca9-74e707117db0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a4eee92-02b3-4d00-a8f5-99f5083d7f79.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a51bc1b-e8de-4b7f-b796-a2a8202e362c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a5b6665-a524-4e7d-815d-b59c0baa7239.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a6857fa-1627-459e-811c-2f6770420436.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a74b0c1-7440-432a-8a4a-01249507d1af.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a78a3bb-79bd-49e0-8c3a-7c326896b4f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a8c73ba-eed9-4012-b46e-13efc1eb80c1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.