Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
44959a97-1cd9-4aae-8bf3-9b0357b6fffc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44a052fc-e3ad-4e47-90af-1dca365fab34.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44a2af55-a0af-43c6-9604-0f043d8f0839.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44acb468-dfc6-4592-adc5-060160ed4782.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44bc7f04-a192-4daa-abdf-c275563417ec.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44c513b8-a606-4c76-b0d0-82ae1c1f3ead.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44c60967-cd38-4dbe-af57-9771a0b60a79.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44c78e07-b53b-4670-8c88-208d6ac7a1ce.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44cb9ba4-64ca-4f5c-bc9b-f177d6abd393.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44e88179-ce24-449f-938c-52962d0ad022.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44eaf69e-71d5-4d74-b3b4-a9d37ea22629.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44ebf2f8-491c-40ac-b726-d4e639bd9721.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44f47bf6-c113-445d-aa99-5714ef1e5c4b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44f7b156-b4de-4844-94f4-4956724ace7d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
44fb4d54-4089-42c0-9dd3-786ef19239e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45096e0e-03a1-4046-9757-a47b14505a76.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
450d7bf9-ec11-45df-9928-b6c8d8e61ecc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45148e2b-c152-4c41-b695-d3ed2b39c6cb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4520154d-7c8f-4041-a694-35d620ffd3fb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
452d439b-1a2e-4a7a-8603-d2050eddee98.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
452e888d-ab50-4945-aabb-a4a9a72cad13.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4532bc4b-cc30-4ed0-8b57-489ccc5180c1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4535059c-fe63-412b-a1eb-dd7ad36cff3d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45357bb0-b997-454f-9484-725d437c8a3d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45420196-ef1b-409b-ba75-92ac555cfb7d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4545bf18-e0da-4098-a548-956ebede0874.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
454e2717-ceab-4b7e-beb3-a9dc6dc706ef.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45538cac-a739-4914-8d06-8c60ce4ced8f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
456033b3-1373-4f4e-be59-341ab893bee4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
456785c7-fb44-4cbe-9e4b-63330a9a2439.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
456f520a-02d9-45f8-8d9b-111056cec608.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
457b7b62-e557-4ce2-94a7-a538473ba072.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
458864e4-2bf2-4222-9cb1-3925cd9d733b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
458b1f94-22fe-401f-9819-57061ccca538.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
458b9a2f-2558-4c7b-b6b6-53b1b84dad6f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45915142-9b89-4ac8-be83-4fa35d421f60.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
459bdaab-da31-4d90-b85e-11778f40946b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45a5546d-9675-4996-91b6-e4b68b36896a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45ca34c8-b939-4961-b75c-7bb796aa24d6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45ce916c-b4c4-4973-a9fc-f9622565dd60.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45dfe8c1-ebd9-4a01-b4ec-9ee3d16e3679.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45eff067-abf6-49fc-882c-368ed105dfcd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45f1a164-b36e-42e8-a5f0-9cecc3f5aa52.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45f95b0e-641d-4703-a5e4-2765824a5a50.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
45fef079-61c4-426f-a8e2-afdd746e0d82.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
46004ced-a0f1-4ccd-96b0-6f0027a63d4d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4615bfe8-709a-4c36-853d-58a971a1a92c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
461b1560-2270-4049-aff8-12081754c985.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
462228fd-0db5-40b0-9c15-958e862a0154.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
462f4fbb-df15-4401-b9ec-43d6ebfe6689.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4633fe4e-58fc-40b0-9524-fa4a090a77ba.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
46417aae-dcb9-4cd2-ac59-ba07245c896b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
46439d8b-b441-4eb1-a597-8bff9ce32d1d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
466a82e5-20a4-45c8-8042-7eab08242f9c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
467facae-bba2-4a9e-a2e2-1f729aca1774.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
468fc99b-a805-4a6e-b8a2-f5693d4d2049.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
469d8586-97b9-4d24-8071-96c60bd8b9bb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
46b4407e-e526-4360-a948-513d59d5619a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
46b9deac-3d76-41a2-a759-048de006fc79.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
46cd8c9b-0aae-4c50-a0ac-874693a00489.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
46fe15b4-b718-4063-be6e-428c2d7fb813.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
470b7309-4426-432d-bb0b-441affedf73b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
471097e8-7559-4995-b3e3-5eb2d88e31bc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
471c8522-3797-4e41-8d63-444d08844c46.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
471fabce-dcfe-4743-8825-193dd54c3fcb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47211daf-db04-4246-a8f2-3b626bfac1a1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4727d35c-ba7b-45ad-94c7-11027e52925d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
472ed70c-18e5-4390-9406-122c7de12e66.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
474c410f-06f0-48e4-8469-9df9b8875e3e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
474ed8f3-7451-4690-8cd2-69c3aca1e980.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47535f23-ed1b-4b87-b131-63ccddf66ecf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4755a100-45b2-4cd8-aa18-6c994bc95f4e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4757c090-9ee9-4cf9-988c-caebf0565487.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
475f391b-8f81-48d4-b787-1ff252c785ac.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4776d193-c085-4068-b41e-a8db30f83e86.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4777430f-0df5-4b58-a20a-885dabf87b96.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
477aed91-d7fa-47f8-8772-a54942f117b1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4792ff93-620d-463b-9ea3-160b948dbecf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47966a89-c0d2-404c-9637-3792ab227728.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47967a28-3900-45f0-aef6-f8cee8173c55.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
479797a4-aa9d-43a3-98a7-e1c17ed605ce.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47a0dcd6-6bc6-45a5-865a-3cd4fe3539d5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47a7e779-5c1a-42aa-8ea1-126aa3897fc2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47aac1fd-d6b0-447a-98d8-be210b1f5c3c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47b0a2f0-2506-4ccc-8bea-85adbacfe8b1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47b2d8fa-39e0-424e-b75f-a8820629251d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47b56474-bef5-4847-9031-998310c1550b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47b57876-2a25-41e9-8d3b-abdc1201e823.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47bce923-6b91-4f13-b31e-fc260679cf32.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47c21382-210a-49b8-ac1e-08b762eaaaf8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47d1681f-c0cb-4251-8fc7-55bd04dcc3fb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47d7d789-5c9e-44f2-839f-30df3c4c1037.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47dd6497-ab98-42ca-adce-64d63b5080c4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
47f34cfd-89f6-46e2-980b-2057ee4a6731.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
48029618-9906-403f-a787-71489deb28c0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
480afb4f-4f16-4590-b952-28f267e72c6e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4825827a-a2f4-4f0d-9b65-a35f387712ca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
482abcce-d51d-44b4-824f-3efde96c3bec.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
482aff1f-0ed5-4294-8034-b5b2e9f5601a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
482e2eba-8bf0-4a7a-8e2e-ead38743253e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.