Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
2a8cf6b8-b315-4914-bcd5-98e3792d5d0e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a9301f9-295c-4ef2-be25-55c5400823f8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2a93580e-cd41-40f4-b45f-d7c0ee5f6668.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2aa0a1f1-edda-4d16-b0e5-84c3bbdf49b6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2aab2017-8ff7-4b04-9e01-ed7db3fb0db9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ab02965-6734-4f2b-935b-c23aef459adf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ab0b114-16fa-4360-8291-7421eb6f585d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ab3c207-03a6-4921-8730-b050908be1b6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ab7b7a8-1ba0-4bd6-94d2-23c52f59a8bc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2acfcc6e-8907-413d-a14a-80d5e8c86c58.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ad99d98-248a-4432-9b1d-5aae1a8dbec6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ae32f84-ce10-45ab-9578-0e518165c8a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ae91042-37db-452f-bcfd-b72db71ef788.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2af27ecc-0c29-44e0-af64-0351244f76fb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2af32b12-6ec1-4079-adbc-e910c9769447.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2af8031d-6e38-42c9-b62d-90b89009839b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2afedf0b-aaa3-4b27-a3ef-64d840f4b6d3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b2418c2-7fb5-45fa-8795-dc150c516c5a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b2bf3b3-1d76-42c8-8f60-02ea620ab110.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b30879b-721d-42c0-93ca-829cfd53e1d9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b41a9cf-1f2c-463f-81a3-757958b71cbd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b4886c2-c51f-4b93-b2ef-9a4eb1b4a4a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b545045-fe6e-49ff-ac0a-0134e94c69e5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b5e0992-3ccc-4e34-aca8-bf54feed4273.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b632d3a-408f-4f67-ae4f-0e3148676c24.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b638cf6-0492-4164-82e7-c50d552c8c48.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b6ef4a0-e832-4b63-bcbe-0fce31664eaf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b712b7c-1839-4a7a-90ab-5f8126289f7e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b75a700-f13c-4fd4-9a16-048e498218e8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b79172f-6018-4b7a-b8b1-005b1767fe23.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b7d2301-a5df-447e-81d7-bf171050a391.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b7f976d-45ec-45cf-83c3-17a7fdc36d14.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b885ae7-98e5-45aa-9c55-fc70f10911bc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b8e877c-f687-4212-ac53-e866ed894179.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b99e2b3-75f6-4ae9-806b-4fa7bcd44316.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2b9f14e7-b785-4aec-a7ca-36239a1c971a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2baa735f-7e5f-4928-8805-6802527a7b65.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2bad0c45-9faa-47c7-a277-68cc0433a4b6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2bbb5ae7-4c9e-4548-aa57-b730fe7c26da.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2bc21afa-9301-419b-8982-38b333daf9ef.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2bcc1578-72e5-489d-830b-fbe5dc611f75.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2bcfb556-d6c4-4220-a203-a1928f8aa721.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2bf1a129-fe23-457a-87c2-6fee0a086b46.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c053434-fcc2-42c6-8fb1-ca0a3a3bed9e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c0f997f-7777-4763-b420-b42eadf1c443.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c130365-c471-4772-a521-a29e0ff13189.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c1537c2-d0ba-4490-8ccb-e7b15ea20a92.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c28a73d-26a4-493c-bf9a-e498fc66952b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c2dd223-c610-4c8d-b57a-111634884cce.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c371dd4-ca63-4dd0-88f9-b58688b735d4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c442efb-64f3-40c8-9d94-6d46ad2317c0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c4f32ac-e909-45fb-ba08-e77b7b1b7fa9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c585978-c232-409c-b06f-11742134b1e7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c5cd98d-e4a3-4884-9564-848e1b4c790d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c69f643-7030-4d4f-948b-67faaefb4359.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c6b95a8-0a6c-4359-8e8e-f07ea2e68276.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c71a2b7-080d-48ce-8742-05ae0eb772a0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c75b098-d57e-4319-8855-4675b43d46cc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c8691f0-13a2-45d3-8c22-9740586e7b7d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c8c941a-d8a3-467b-ba2c-5e93b1147fda.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2c9e1e7d-445b-4f2f-9941-9fc37a92e1df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2caa64c1-5f4b-4bbc-9305-5db4052c3558.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2cbc9028-6d2a-4363-ad74-363996ac6a6e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2cbec04a-d88e-46fb-a662-109cab6dacca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2cecc979-a4de-43ed-aab2-6a882ae8b004.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2cf1bb97-ec5a-4c9f-9194-feede60140da.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d079e6e-d1a8-48d1-bdeb-d728f6df5d87.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d0ead3f-abe4-49c1-8828-bd0e359c52e6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d118894-7df2-42f2-8b52-cf758b663f74.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d14ccf0-efed-4c65-a3ed-8dab681676cd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d1e599e-9cf8-47d4-bf0a-0ee5d0619af4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d2263a8-9c0c-49d1-a058-b3bfaeb463e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d25b539-9a0d-4bfb-8e15-191796bbb834.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d2f0e6d-f2bf-410b-9b4a-c92bb0a79512.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d3b61c2-5b4e-4c76-ac86-0236effbd0f1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d3dab5c-6d40-4291-ad00-1bbc7a90b458.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d4f7a56-106e-4bf0-9221-090466e0b52e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d5a8db5-3139-4b9a-b19e-d54f3559f65f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d611a00-8d69-49a3-b4dc-2c501e4d2da5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d710ee5-6552-4973-a0b4-d34d425191f0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d78d607-ca3a-4863-9faa-212b7bd9efa8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d7914ad-6667-4bbe-afc0-ddf6327e9e44.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d7c54b2-9764-4e7a-b592-428fc30c9821.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d814035-c0f9-4380-aef7-0bf3d73975f1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d835248-0d59-43e7-8c4f-892a32d6be35.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d88bfbf-f282-43bb-b17c-ac8e380378e9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d8b5441-fe81-4ebd-839b-2a82a325069e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d8bcabb-78b5-4b3c-89f4-fbee03d3b86f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d9006e1-5c09-4b46-9639-ba770c51f220.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d960743-6a73-46c5-ab27-2889a8e03ecd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d9b85d7-3751-437b-b71f-b2df2f2c4d2e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2d9d6dab-0734-45be-b15b-c5adb67a1a51.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2daa6551-ec86-467b-9ac5-8a5efad37a3a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2dab23d4-4c18-49ee-bc7b-75dd706efc04.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2dac942f-5e60-4a5f-b4c2-7d43651b7b5b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2dad87d7-03aa-45c7-a088-5fb077036775.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2dbc968a-5ce7-4e85-a0ba-4318eaf70602.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2dc57e75-fc9a-48c2-beac-dd3dd233b030.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2dd2133f-fdfe-49b4-a4d1-6d1a3bede1c9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2de7e222-73d9-4bfb-9b60-b9e9b213a267.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.