Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
345a61b5-48ed-4b44-a893-cd8f6f160da7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34620abd-9147-4857-9714-40cd176723df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3469b2e9-236c-42be-b34d-1f2b762249f5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
346c3619-7f11-41da-92eb-baf7efaa1c28.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3472172b-2b42-47b0-86de-23ea03361c9e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3472b786-8cd5-4b55-8fba-e60c8d34005a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3477f28c-c3e0-4498-b4eb-d5042b453627.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34780dee-ead7-4cd0-a860-6273def7a9af.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3485cfed-a908-47d8-ae5e-bf3b5c6d35c4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
348bd89d-1807-4214-ab98-6264dd0180de.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
349908ff-ec24-4d76-96f0-8cb5a0896939.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34a12317-7278-43d2-bd49-73023cca6ac4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34b2ec0c-78ea-4d55-9b39-23034778c379.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34bffacd-a3fc-4ae1-a8c1-4f41bab23abf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34da348b-51dd-469e-9a6e-443b18636d66.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34e4879d-974f-437c-9212-a3a3b42ef450.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34e80608-5d85-426c-9fcc-275ad43c13a6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34f017db-5d13-4f77-8508-60d85eef9cda.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
34fc593d-e6da-4ed6-9027-ef8cc007c09d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3505ce2e-e76f-4562-a2f1-870b95b23e8d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35062a48-93de-4c1f-9bb9-b90d0a1549db.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
350e96a5-2973-4eb2-9569-a1e01cc143f7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3514b9bb-8545-4335-a1d2-4152e7c74499.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
351a932f-3ba6-4b07-aad2-12957ae6be82.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
351fa626-a2d5-4681-ae50-4a1a937b06f4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3524e578-58a1-412a-a0cb-b4a010aaee23.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3529ab1d-3b33-43ff-b8db-0c087a8b0edd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
352bb48c-656c-405e-b9df-211c5a3df3b5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3530758c-b98a-483d-8d7e-7f68b83cc42d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35317152-7236-485e-8f0e-831f3c5d8674.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35351945-36b8-4526-a93a-45b2929ba262.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3543b325-69e3-43da-80ce-973bd326c1e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
354853ce-189c-43d2-ad84-f42d9d3a495d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
354dba3a-1be8-4614-883a-0908930639cb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35527357-ec36-4859-ae34-28af5d9963c3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3561b74e-fb5e-4bc6-95fa-8c5ccee0447d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35898bb5-a91a-44f0-876d-95a2aa34fcf8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3594b84e-9af0-437e-8f80-2e470f48f887.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3596d507-7927-4ef4-aaec-bdcf3d3c51a9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3598d208-4e45-45ca-96f5-595fa1759658.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35a27b9c-6e76-4a06-b5c9-bb3886b4d862.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35a62804-2991-48c8-9854-06afe2ae0b36.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35c18668-7673-4b49-894b-e878cb19e960.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35c66716-de73-47ee-9183-a5a2b2dffa17.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35c779b8-fbcf-4d39-9d4e-ee3f3edaf2de.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35dc083f-3d1e-4f05-8327-2577101cb78b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35df8955-edd2-4cf4-9b8a-fb2114a2f1ad.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35e04d9e-6e2a-4cb2-97b5-006da3d93be8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35e36648-9428-4a00-a5d9-2984cff9728c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35eb7278-6e8c-463f-b48f-e5ac5c17a66c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35ecd0d5-7c42-4a7a-a8e4-81bf260fc29b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35f8518b-4c1d-4e07-9e0c-b0348ff02fb1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35f90248-614d-453f-a19f-e29cdc887844.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
35fd3a5f-c5fc-404c-b204-1bfe49838f42.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
361bae43-3632-45ba-a4f2-3e916cabf630.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36327f69-6dce-4d22-af43-12f3ec76d583.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3633d849-50f5-4724-84ce-cd69546068e9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3634d70c-5b67-4fbf-9396-fc3650e86212.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
363754fe-5c6c-4e5a-9480-2b1e7ce2feb9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
363f1cbc-fcda-4a92-8bed-5a5dada5d290.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3653cadb-4d9b-485a-b74e-4f868a067d47.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3658b1ba-d5b5-4d02-9415-7ccfccca8e1a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
367684e3-d0a6-4369-9e50-86ef08b365f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
367ace42-7307-49e2-a262-dd7e2bdcca0f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
368bc586-0d67-44b8-8651-d23533026ef3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3695d771-d19b-4730-a35e-348efcebd23e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36a95aca-b6f0-47a2-9204-20dd4407a1e3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36b13247-beb4-46c6-8b16-d771a1c896e9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36bec378-7100-4747-b4d0-0a826c3e89a5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36bf4320-07e3-458e-a765-6205b78a322c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36c4142d-17e0-4d4b-a898-ebb51077fe8b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36caa33d-0937-4018-ac21-7bdc4d46d131.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36ce3569-d7c6-4da6-aff1-6b0c9c81f657.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36d93bd1-99f6-4dc2-a206-ebe1c5f76812.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36eee8d6-f571-482e-9528-29dd9acae43b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36f4e325-40eb-4f74-965c-7a2ddd6a2103.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36f8a813-fc1d-4c10-8679-4a84937f2840.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36f97def-62f4-4920-a221-fe91db1bfd85.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
36ff9ecf-72a5-4d0e-80ce-fcfae3286dea.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37050191-21da-4e41-ad5c-c85bf865a52c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3706fd0b-7700-4793-83b7-5bceade15035.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3713f5fa-67d2-4a3c-adf0-288882b3951a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
371930f1-acef-450f-bbd8-7fb38e6662a0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37233db5-24a3-4c0c-88ef-2559e0e489e5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3724ce6c-6ad8-4573-a25c-7fed8cc3ee07.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3728a973-ac6e-4a7f-9cc2-da811ff9157d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
374ab6a8-fca0-412c-9a4d-c660f104e447.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
374ad911-b4c5-45e6-a7d9-8808dba0ff4f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
375edfa6-a7d7-4035-939b-5a8c3f98af05.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37608b23-e6d7-46dc-b45a-cfee815660d0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37631f99-60c5-41b8-8e4d-8b6ec06fd8ad.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
376bbe17-f5c5-43b8-852d-9b924fee66ed.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
376c46fb-d853-4785-9f3f-1f6b6657e688.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37744d8e-dab0-43e9-ae13-05e8be203eaf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
377bd0c3-6578-47a2-bb09-3ff7b2aaa5ae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
377c995d-3b9a-4387-ae7a-943b21b3acd4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
377df997-412f-435f-be38-88d84114362e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
378214cb-3b1e-4b8e-b032-ba9f8b4fffd3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3784fa07-26d9-406b-b7ca-b6d8641f3ce2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
378bacab-2153-4b7e-95d8-fb36dbfdea9a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.