Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
4ba9f932-5921-4998-9a06-ff6cd7128b9d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4bb7c739-6d6d-487b-ac40-d4ac398d3dac.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4bb88a84-2958-4154-85ee-881c60e409ea.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4bb89678-84fb-4b8d-a0cc-ecd0a46a1162.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4bc09e58-4ce6-4f23-9192-26031f486f89.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4bc8f254-c7cb-4044-b201-a7992d3d78c5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4bcba2af-ba11-47b0-bbb9-3bd6bfa181b5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4be04301-b021-48f2-9e6c-656db62637a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4bf7ed3b-2aba-4624-a87a-9668c7a29636.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c06774a-139e-4284-ba12-5a2c24999ff5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c0fc143-0da8-44f4-80a3-87212ada8f58.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c1bd5c5-9334-447a-a94d-1a1985540d42.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c20c1ad-a2fb-4d11-a702-c696399e0232.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c319f08-a9a7-4fda-a9be-ccfccbf53934.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c355dad-27de-4dcd-8755-f819de0e28dd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c3d045d-33e3-4456-b38d-466e1a45e6f7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c41f9b4-2a66-4406-9ef5-d12a4d4ebf66.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c43060c-5f60-4833-8959-7f8bf6d981f9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c486f1e-6222-4717-9abe-53bb1efc157e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c5a95a1-2866-4077-807a-0c0c69789050.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c60c82c-5801-486f-a27b-b739628df0de.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c64fe87-9a78-45c5-8ea8-629f82bd7103.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c6dc584-9c31-420c-a028-71979c30e052.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c7d413e-3a24-4389-94ce-83c08915eb22.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c9287e5-c2d1-40f5-8a85-8c4a603b708f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c9527d9-42e9-4cca-a8ad-e34ecefde242.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4c9df643-1521-48eb-be64-ca138af7aafe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cac2d46-fd5b-47e0-bf0e-3e5a4e3c9ba2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cae79fc-8e3d-4f36-a295-e61cefe30ef7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cb3923a-5bbf-497c-8268-2cd8ae5e569c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cb48ebb-582c-40c1-ba76-b38b401e239e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cb837d6-f4c5-4915-a398-fab82bdc5e0a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cca21fa-bf63-49d0-95a6-816888c0c85b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ccd3bda-3731-41de-b11b-ff866b380d69.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cd3ee68-daa1-4fa6-b432-6251730a50d8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cd7f144-2310-468a-be69-4a164045ef0d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ce9aeaf-6681-4229-851d-d57772bd9f99.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ceb1e3f-7c53-4f5a-91fb-43a6f301c3a2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cf03d32-0ff8-4b65-b40e-aea8a8304db2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cf219f3-b9b4-444e-a7b0-62d419158327.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4cfea349-f110-4408-a3ba-9eb291871e1c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d02d774-daa4-46d6-a527-4cf5056fa1cc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d0c772c-1e6d-43d5-ab51-09220b995b1d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d311898-5f11-4aac-8242-31767a60244f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d313076-df7d-4818-a700-02374cadc380.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d3dd2e3-0b4c-4f1c-b335-3887373582ad.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d4e0c96-245c-44aa-b460-2c336952752b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d4f9ba2-93d0-4b6d-8e12-fa88c5556ff1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d802e8f-1936-49eb-a65c-ead0561493d0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d896ec6-c409-4ddb-8798-047c21c22a07.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d8f40a0-99ad-4256-8458-333e740e8feb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d968f9a-dced-4ba6-92b0-a2e0611faf3e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4d9e890b-5aa4-4343-b319-f8f61ee1de77.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4dbe43b8-ae21-4664-b486-8414571a5726.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4dc43ad4-ffe9-415f-ae9b-0e7bfbe3e158.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4dc9ce78-f05f-4d8b-85d7-775058ee2738.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4dce7704-a07c-4aa5-b318-2c8ea6f258a1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4de455c1-61a7-4f51-8c29-e66aeeaf6cb2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4de5340a-ee7a-4232-a029-8ca2e4ad63d2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4debc427-4bd8-4d73-8f06-180729ae0e1b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4df596ac-180a-4223-9502-9b54f01d8ba1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e001bdc-49c7-43f1-872b-c171b25e9324.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e042599-3cf1-4266-a1ee-049e274aceb6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e0f354c-9bac-4b4c-8edb-1957f222abf1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e29b472-6594-46b7-9ce2-2f3aa854a940.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e3825a4-46fb-4069-920c-efdc05b68cc0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e48049e-9f44-42c7-84fc-79073b2c654a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e48a03c-db03-46ab-bf74-04d978ba5b09.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e49d9c6-3584-4cd7-a068-2c139371d2da.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e4bcb78-3f3a-4f52-8ed9-2d16a39a0957.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e536279-0948-45b2-9424-1fb862b92acf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e61ecca-68ec-4baa-80ad-69e12a6b2ac5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e6d0723-ed7e-4acf-9cb3-ff42143600e7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e72ba7d-e541-4d43-93fc-b5443cef5d2d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e76be99-a0fa-4354-8966-62b199d83611.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e8c1586-ea0c-41fc-88ed-83ea8c83e201.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e903ec5-9153-46db-af34-51276dba7912.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e90a8a9-f5a7-42d5-bc88-8ddb04378eef.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4e95238c-bc04-4338-acd9-71d77fdff5ce.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4eaa152b-3f98-4d18-a988-939a36af8f85.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4eb9ed04-c64a-46e9-a300-5e996d001d70.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ec10a83-9416-4e58-9c07-7da03819a23d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ecccecc-94f6-4b92-8cf3-ef18d1aec44c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ee379a7-9f1f-42d2-83f6-f6f39684a696.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ee48470-63cd-4d8d-9127-4ec6f87569d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ef13c7b-2ea6-4662-a3fe-d406d89cb4dc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ef7d1a0-f796-46ac-87b7-77b45f3ff9e3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ef8c74c-c7d5-4f37-b80b-82e61fc5a972.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f008dfb-6fae-4ac2-b4ea-e875dfe29d02.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f026eed-cd04-4ac7-9463-127bd343c176.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f032841-3c0f-4532-9295-27d3510d4e2e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f04a827-55c7-4582-a9f4-18244cd0ab4d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f1101be-42ce-43d1-8bf7-f682eb0efba4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f1e5487-256f-4f71-8162-d1f514e5908e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f225ee5-f8b8-4e20-adf9-5b1eb37fcd66.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f23e511-6ecf-4701-b8e1-1795474ddc9d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f271608-3a62-48e1-a86d-ec8e6139ba62.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f29082e-a9a0-40bb-b6af-950de3e73c4a.unifi-hosting.stg.ui.comNewstagingIn scope2026-11-15
4f313fd8-50cf-484b-b017-2f15c77776e7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f358b1e-e712-4861-8d19-3f0375104abb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.