Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
2deaef67-26a4-47aa-bfe3-28a967e4dad4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2defda45-fc25-469c-b8de-3bebbf6315a8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2df32b02-a648-4596-ba25-bfac1d329565.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2df989c0-8c44-4ecd-905e-8dd5d85badb2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e03be07-0e67-4734-8e64-b0bf37f4985a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e12e2f2-9a97-4f92-b942-7621d31098e7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e1a1e06-946b-4a01-9bda-e70f9b691250.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e244c73-b4b7-42db-a230-87f8bf6591fe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e2701b7-0d70-4930-b1dd-edb00a1dc9ae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e392506-28be-42ba-998e-001b5927f0e7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e399a1a-ff2e-41dd-bdaf-06e01f75f150.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e444727-adf2-49fa-98ae-9d3c28e00559.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e45cf78-b842-4e6d-b7bd-4cda5f4da147.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e49ae05-ddf4-4d11-974f-e45cc12ae517.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e5357dc-191b-4a94-a1fd-7bc3d24eda34.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e55d893-e2ed-469d-ac07-e90934dd4c1c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e641f50-f5b3-4d13-adf1-b18685155724.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e6e4248-d261-4683-b9be-671c7aea5d8f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e72a70b-3e05-44fa-b397-e56ddabf36ed.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e7d4a95-f71c-42a0-9ee4-10ef62d34c16.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e8314e3-b07f-497f-bee4-2a78972a3bf5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e884f39-48b9-4c3f-9dba-e20413e82f69.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e8f7535-2c17-4cb0-9e78-ece6e06e03f4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e9befb1-786e-4d76-9685-c5277e1f6138.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2e9d3b5c-73f7-48c9-a4f5-0e1ff3ed15ef.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ea1b823-6e03-42a7-bf9a-3c8fd2a64306.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ea23e34-9ffc-40f8-a94a-619febd6e4fa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2eaf7446-b2fa-4484-bb76-fdfed78345ff.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2eb684e1-69e9-4dd6-b042-b9c39551f6a0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ebb2154-cf6d-415c-9a85-f25651c31755.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ebff545-6322-4967-8b36-d13a1f94b2b5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ecbe3a3-f886-4f5f-8527-5a90d3be929e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ed0a022-972b-4cf3-a51d-70f3d69cd918.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2edb5bc3-d819-4f0f-84ae-46cfe680880d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ee5a46d-ee81-4ad0-9041-e8a207fcca82.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f03dd71-545e-4b45-b393-2be1e2c317ff.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f087ea0-399c-48a1-8c39-404a0380d1b7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f09ca5e-73e9-43a0-82d3-49d62f2c160f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f09e99c-8ef3-4020-a9ae-e9bd961ce2c6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f12da56-106d-45bf-b680-f8009b63e02f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f14e257-5942-49fe-b6f1-8e3d4e69a057.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f188700-0998-4884-8148-46d189365392.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f2acb90-6801-4a1e-947c-657188213a76.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f2ec08c-7b01-4104-943f-b1534823f43a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f367873-be61-4e52-b66a-442d3599c577.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f525b58-f056-4fc2-aaf8-6e7659c38915.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f54a0e9-c6c1-4d25-a53a-17ca213aa7a8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f567785-5b33-4060-8052-532ef84229c2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f614ce5-9cc0-45ef-a192-2c856eeddd97.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f700290-4aa8-4969-a9b0-bbf468633969.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f777e89-13a0-47a3-8f4b-df7d8b888ac6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f7899dc-138d-48e5-8127-a2982589abfa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f82585e-6a08-41f8-b77e-a30c33f636fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f8adf88-e96c-4930-a6b3-0cfd08a0e967.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f8bfd3a-7cfa-4741-a9d2-080f42909e3c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f8f3fd0-9efe-4d20-8697-032816eed0e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f922f1e-7f67-4d21-bf50-76356fb505fd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2f9d4c6c-5e60-4b0d-bd32-2eb35c116324.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2fa6379f-4844-4e2e-bc89-2f88adb44f85.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2fbb2340-0f71-4438-a6e8-fa305211d555.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2fc1e21b-97d1-4678-97b5-dc5bdf9804a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2fd85733-a25c-4759-8b82-d1befaf7d04b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2fdf1465-7ede-4945-8cb9-e0d497e224fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2fe62410-47d6-4522-b81e-3758b0712ff8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ff37511-99f9-4f0e-9857-a9c9e9cc3db9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
2ffa8ef6-8afb-437d-bcfc-af478ffc62d2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
300c462a-58b1-4ff8-83f9-2c8c5329b61f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
300dfb4b-f80b-4827-88e9-3341238b558b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30184a03-23fa-45e2-b181-2a304cf2dc3b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
301ffa53-35d0-4a95-ba0b-93a4405b5346.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30243293-ff7f-4848-95b8-b7ee431eae99.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3029b4e3-4417-4828-ba7a-fa4978405eca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3029e819-5316-4ad6-baab-0130eb92171d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3035ceee-ff3a-4b29-9390-6441e4908a19.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3038e88c-a913-448b-be27-912f1e1d019f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
305596c5-3715-4eaf-95b6-c1a2a6f17b13.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3066059c-199b-4da6-81e5-6fb7c9f38425.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
306a1b4e-6370-42b6-b4a7-2bd3a3048f91.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
306b6469-f83d-41dd-a8e6-73e2a1062d51.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
306c6848-4878-4f46-94cb-6de42e973f73.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30740216-6c6a-436d-8913-8ae169d61397.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
307b0a15-40d5-4cb1-b6d2-08d42a4cd145.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
307bbfb9-dd3c-4ae8-b40e-01b0e55b28a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
308248f5-d2e4-496c-8054-fecc0ef4bfee.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30877d12-ca39-4e1d-a9d2-48559b3d32d4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
308e3537-3d6c-4bd3-8c16-c2743879bdce.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3090830b-0b2f-46ef-b880-4aeaa55a45cb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
309345f7-0672-4a38-be13-e86d3ac8ecae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
309fe95c-463f-488c-ad7d-99c9115d5686.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30a9d245-f193-47eb-ac0e-062d93a6b7c7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30c33de5-e9db-4d6b-972a-86c84b19c66d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30c3459d-a417-42ef-86fa-07dea17ee7cc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30c7a7a6-d054-4fd6-909a-37b4467bec80.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30d15b28-32d7-4a5c-806e-c7e3ce2f1bbc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30d3b5a9-cfe7-4485-a640-200743881c06.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30d4b8b8-644c-45b0-8fca-ab3bbcff3649.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30df7085-9c5d-427d-b318-ad2e72558eba.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30e1941b-cd3e-4b39-8360-9b1e9e07d47b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30e4c96b-e7bf-4356-909e-518ae7da06f8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
30e7f99d-b0c3-4db1-aadb-65a2f1c71a36.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.