Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
378f7392-0497-40dc-bb8d-12e6bc09a3f7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37a14aa0-3034-483f-b417-4ccaa611b58b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37aa0168-b02e-446b-a1de-8bc73204c5d9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37b32fd7-5e0c-46c1-977a-650f23841989.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37c647ce-df1e-45a4-8118-f3ebfa97abb8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37c70346-00b0-48c2-921b-88ffea290f05.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37ef0605-d0ac-4913-b343-bcae2bff573b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
37ff3c0e-5a54-44f9-96d2-3dcd53a7f70e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
380b463b-20f5-4a80-8445-f57693254361.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3816be03-b0ec-4128-a6a5-105e91ac4bff.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38334e08-9e0f-44a8-a56f-e28a156394b0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3834e028-3a9b-4ae7-a403-b755775f575d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
383606d5-b312-4e5f-9116-9d24b777e272.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
383a9f49-9fcb-4491-9415-c0ee090817fa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
383c44ee-abfe-4ea4-8be1-a75c63c59534.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3847c790-c902-4fb5-86f5-a3e005203ab4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
384c45a4-878f-4140-8d13-de5a21b12786.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3850bb28-9b96-4dac-85a8-8a367f325edc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
386c5bb6-1105-4e1e-9f9a-52dab9c480b9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
387515a2-1da4-420b-bcc7-fedb6d73cde8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
387e8975-7ff6-42ab-9fe7-9353e50cecdb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
389315a5-4ad1-4058-b3c7-14c755441d53.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3895f11f-7ff8-4dd2-a52b-1d2bf6bac566.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3897423e-5bcd-4dad-b821-6b30fb96a6e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38a2fd20-9cdd-4773-bbe4-e87f1e968f5e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38b03ee9-1ca4-4fde-887b-3abdc7b9af87.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38b680c4-6aed-4bfe-8edf-cef3635cdd8b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38b742a0-136c-488a-9aa4-6a7098cd2e3a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38b761ab-4d34-4f3d-9058-09e435178c2f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38b9794b-5712-47b4-a705-ad35ca678585.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38d8117c-440b-406a-9f27-2c928308cbcc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38daf476-2882-4f82-b303-48ee683ad163.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38db9965-2165-4328-9446-bbee1dac58df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38e73ff2-84f9-4a9c-9159-fbf1bb51b236.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38ecf4b6-37fc-4079-a67a-72aaca287c9b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38eed822-c7d7-4119-9e89-7d2a0c12880d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38eff085-4ffc-455a-9e05-3bd10b63ac88.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
38ffb25b-7484-4aba-83ec-4cb6e2f48828.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3908491f-45cf-42ac-9a42-367d144fb473.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39108b8e-fbad-49c4-b1c9-a42f399b3808.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3913fec3-dfdd-470a-b1da-e091521eb05b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3925375c-0169-42d6-967a-bacbc67b7b30.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
393ea631-a926-4754-85d5-b5ce4427fea0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39405309-e636-4357-9e29-61a8adce5a41.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3943e4fb-f594-4576-8d94-0f2eb7f805fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
394b39de-1495-4107-a0c5-66a2b8fd26dc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
394f7290-382b-42da-b8a5-581cef3ba67d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3952a7c1-f715-45bc-9f4c-cca5bfd39bae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3952ab0c-e701-41fb-b967-ff85a99532fd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
396138bb-3dfb-4a91-afb9-761776b8fc8c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
396285ff-2a78-4fc3-9f21-ac67545986d3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39666d5c-4401-4efc-988c-d4f875bab276.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
396f0471-81a3-4f93-affe-3b2bd63ed2b3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39737733-c98a-423f-b60c-fa66a1465aaf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
397fb7c9-7323-46e8-b457-8f94fc6fd296.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39912ed2-3785-4188-af7a-b548a8e4d9ca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3993e698-99cc-4d18-af62-f7a6cc71176e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
399b9311-6a2e-4562-9862-d85c2f2ed05c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39aead24-5153-4eb5-b447-0425d03191fe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39b1c238-5ec7-4cac-baab-fbcb85223c0d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39b81fd6-8492-4f56-913a-696ed75cb8e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39bd187a-bf0b-489c-8fed-8ae1c9cf3752.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39bf4063-5dc4-4152-9f58-8e888e8f47a0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39dac9e2-2476-4a8b-a6bf-67cfcba4a51c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39dcc75c-7443-4e6d-8df0-09365852b4c1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
39ed3e6b-d80d-4b3b-a31a-4db662059884.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a043241-5668-4a07-90a1-a01f7869abaa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a07babc-cea5-4c45-8cb6-692bfc988b59.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a0847fa-76a1-4b1f-99d9-8dfae268fec3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a09e194-5e96-4695-adce-20e4d16fc41e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a0cfa03-6d14-4cff-b864-49d8312afd0d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a0d136a-db27-4b53-a833-cae52ce0c694.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a145639-b9a7-4f5d-b0da-e95e96660ae1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a145769-f646-476e-801d-5a59ce08afc3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a19d66a-fd28-491a-b5ce-5439e16b3730.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a1bd896-6ddb-420c-97a9-e5d3578eba67.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a2c119a-ad07-4eb6-b304-b149e8d98f00.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a3348c8-0224-4172-887c-eb596258940d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a353625-8b8c-4e41-a27e-4c84ec076b57.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a36dbc9-a5c6-4cad-9a29-d1b36cbb0782.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a3b198a-4e46-40d7-a2dd-b691d1dd0a4e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a42ec04-1058-40b7-9efa-e15b52ad81ab.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a48b533-72dd-4927-b3b6-93dde970a5b1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a4b727f-4f72-441f-8490-ac4f7a7b788c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a4da763-e15c-4d9b-b114-d3d518eea98f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a552894-8de9-4e7f-9ffa-e864719fc61c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a57392e-b406-4d91-9752-c46866b0068b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a6995c9-5330-4736-ad5a-0b925a345e43.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a75d8d3-8146-4b0f-b738-58275daa8fdb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a8bdd4f-bf6e-422d-bbae-37df28c1c683.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a8fd8e6-c166-42bd-8f20-243fde5962fe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a90453f-9638-4743-a474-80d4fa3390ea.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a91af7d-5bf6-4718-bfb9-3feb9561a629.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3a98af40-6951-4fe4-ac02-d5e13ceed141.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3aa22d65-80db-429d-bd4f-98a5010fbf5c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3aa89b07-b425-4366-a02b-e44f58f2335e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3aacbc02-9555-47fc-a2fe-b34a39d5795e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3ab12dc9-eea3-4f78-a82b-df70d03bb713.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3ac07830-c240-4ba7-b783-87e7dad8dbcf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
3ac8c031-d025-47a1-a499-257049fb2680.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.