Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
4141c6fb-f3f8-449d-9c1d-7b0ef967e614.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41440e72-2a00-46bf-9237-e8035b8f1268.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
415c7bda-b848-4f7b-8908-466310bac0ae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4167426d-c539-428b-8b5a-c8b8ff9bf6df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4167fded-7f1e-46af-bc08-6d8ae25a0cca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
416a2cfe-ef55-450d-97c7-7629deb140e5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4179c9c7-987a-4be7-ac0d-686ac7f959fd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41813a72-d271-450b-a105-22c03ac6eb46.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
418af39d-5b12-41f3-aaa3-926698de7755.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
418e23d3-480f-48b1-99df-9689a0d9fb32.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
419056b1-c3db-4ca2-9d2e-653df9cf20f8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41911738-b12c-4f1d-874a-0e3608e091c9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41914ffa-e5c7-4952-8cf4-1b49910890fb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41a6c86f-499b-4f30-9801-804ce70e4342.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41a8a649-3241-4f7c-ab02-8c20a265d103.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41ac9749-524f-4ed1-a0a6-f7e28aca0f7f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41afe465-7781-4275-930b-49584483cade.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41bb2f01-38c3-48e3-8a83-1265f54a79ed.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41c29b14-a8c0-4e88-b7ea-a8292497915d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41c34a11-52a4-49ed-902b-ab43d351b73a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41c42d4c-4e2e-4de0-91da-9a4fc38637ca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41cca7dc-ecf1-4670-9fd4-3f8c2cd0fbe7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41d340c9-db01-453d-b0b4-50cca6568172.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41de71d9-4660-4839-95c1-5e47f313ab4e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41e13458-ecb5-45aa-9fce-46e1d42ea521.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41e433a7-f93d-415b-bc12-5a8c4c5b56bf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41ec7af7-8e44-4504-88d8-d857ca27d4cc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41ef0929-eb34-487f-b82a-4e2492ddbb0b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
41f84b4c-e22f-4ea7-872b-33f1c0cdd737.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4200b49e-aedb-43bc-aa6e-cf6d1bb28c62.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4208d93d-8fec-45c5-985e-87fb196af7b9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
420dc2ea-b868-4d2c-b97d-7bf5e7d2e650.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42175fa6-bc5e-4d40-8454-ff4798517b7d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
421df889-026c-40ec-bc17-8a083127e4c8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42211d32-73cc-43d5-9bc5-d0be1ff14a7f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42267e81-2559-4c9e-bfc6-bc3d5da46646.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4229ea43-cc59-4b79-a292-54f9c01edac6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
422cfd8b-6b9b-4c03-a3a1-432e1f0ce567.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4238f1a1-affe-4078-a1a8-b9195de7b7a3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
423f0632-974f-4b12-83d1-410a1d243620.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
423f0b0a-7a90-4685-9204-1d5d63a6cc2b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
423f8c98-e966-4f00-9a92-a75814dc9700.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
424bcabc-fb4a-44f5-b49d-455feaa0dee8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
425aa40e-8885-4225-8313-e230d4f67c8a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
425d6f93-5370-4bd2-83be-6027f045c5d9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42663475-91b6-48d6-b855-5a80da6a4fcf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
426e997f-f675-413a-82e5-ea5dfef59dce.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42932ecd-b532-4d32-8b1c-4a20ba6dbf3f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42a2c2d8-0dd6-4750-a6d8-601108043ba5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42a68086-d21a-498b-a4b1-cfd80e20e955.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42a7027f-4a8b-43a3-80be-17e51d7c485e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42a89787-ded2-49fa-8005-41755090d665.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42aca474-7a92-4112-b7e1-cc4de389ee21.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42af7771-4f13-4690-81e1-9875a02dcfbc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42b5056f-3268-4b34-9b6b-bcf9602fd2a0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42c45bb8-458c-4f96-ac36-7700b24fafda.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
42dade61-5867-4f66-9b23-4c2a829da9e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4300586d-2bbc-4055-9c29-653ea0b4a656.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4317a720-abaf-45a7-8e78-1bbcd1c62bb5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43211eac-a140-441e-a0aa-86d1d614dc7d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43281035-661a-4030-ae0b-08e1f34c9645.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43385f7b-db08-4570-a600-938d1e4ea975.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
433c54d5-d3b8-4e82-9a96-61c558b5fe68.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43447c32-5773-4cd1-8300-45139120e5e6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
435cbe57-06e3-42bf-9ffb-b9d5eddd60ce.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43757637-2e24-4f78-8836-e555696b41fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4376e641-71a9-4098-a16c-fe7a2faf5f0a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43853e6b-3895-4430-a4ae-7198b46b8c47.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
439ab21f-4c24-42f2-8341-ed9043ee729c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43aef0f1-c760-454e-8255-d5b3efdc758c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43af03e3-1e4d-4a9f-917f-64276e85d23d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43b41324-4a43-45fd-b159-8ce5b7770c5d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43b4507f-e102-470e-a6c3-3d5d5eecc3d3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43b47f7f-8fdb-4cc1-9037-a8c8c9f30a25.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43ba9225-c431-4b84-903a-7dc854c9935f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43c0c5e1-f88e-4476-845f-fd680d3bfe4e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43d2345e-5249-45f1-bb56-7bd0a6445f9e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43d4606d-866c-45f3-addf-99bd00d3916b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43d4a26d-dfc3-485b-a02d-1773b70e37b9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43ddaaa2-b5d4-4649-ae9f-04819b5ab6a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43dfca49-04dc-4d89-8378-6f92a6e61685.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43e801ea-63b6-4cfb-a99c-994f66cbb770.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43e9ce0c-27bd-4d2a-a4d8-7c8a16ffdb43.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43f39715-ae10-4c80-b4a1-7b88f2e42513.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
43fff629-33f4-45cc-9629-05404e9b9ef8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4404961d-340e-47ce-9807-f589cc47c635.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4433b478-58e4-48c6-9320-f698c459e02e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4436a5f4-8298-4357-9b93-e7c47704549f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
443af44b-4a44-4cd4-96b8-3576338f7668.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4441638d-239a-400c-a864-51309662cbc3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
444d7310-9a18-4ecf-87b3-c3480b331f30.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44545a5a-ec0f-43e1-9b80-5fbcc0ff5a64.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4459e958-0a32-4bc3-b561-834bf2b163fb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4463d46a-ca89-4208-bc40-2b5016cfd583.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4466d8fe-9d46-4b59-b6dd-23ed1a301e91.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4467ef88-764a-4c8b-aeca-b6d733de144e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4473a5b5-e081-4343-8c73-c1e530756987.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44846454-76f3-4227-9822-8bd406662d25.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4486bbbf-87e4-4a12-8174-a6268be5a154.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
448b97bd-b626-45ca-8048-0428ae040e62.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.