Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
1925a0ba-1765-4d51-a52e-ea831b2ef7c1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1975d8aa-4704-4d9e-87af-8bbd9b6fc084.unifi-hosting.dev.ui.comdevIn scope2026-11-14
197f5174-55ba-4408-92ec-9187c1ff3620.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1a2f423f-b478-4508-b35f-656c7f50acdf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1a606901-c9b2-49d6-8ec6-0b2a7f1b2928.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1a9826ec-5f2f-4a59-a23f-0a2fa814cc61.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1aaaf6db-af28-4077-81cf-97697f93b6a0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ab6adad-81c3-4d51-a384-275e7166f241.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1b1474aa-4f1e-4cd4-85fb-00f46513629b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1b2484be-323f-466a-a915-712f1fa00f07.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1b54b9bb-3e6b-46c4-97a9-c1917b03ca75.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ba82cc0-7a8a-4986-a7ac-d82e05ff2355.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1bc485ed-40c8-4523-b081-0e26f60b2254.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1bd715fc-84db-4f1f-bb58-cc13db2db480.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1bde6974-4117-43dd-94bd-56889df4bff9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1bfdeaea-8a47-445f-8c66-12f3f80929fe.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1c2da04d-6603-4d2b-8f5e-b5c61e6ae7db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1c8d40c1-4dcc-41ca-821d-dffaeebb4393.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ca47d9c-090d-496a-aac3-ce7cffe5ac87.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ccc4a39-b099-4ffe-93bc-65b3de5be746.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ce7e3c1-0469-4c4c-a590-f3f4e5fe0739.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1cead2be-5403-47ce-a7e9-e00cc0fda938.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1cfd2a6b-c118-43da-ab8a-778ace60ace1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d2d3527-e2e9-45c2-8c1f-bbd837edfe0d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d66ef16-4478-492d-a66a-651ea6dd36c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d6df68d-961b-45d9-a149-ab77cfd356f1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d75dc60-42dc-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d7ec86d-5cd4-48aa-b087-f0de48bfaed2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1d96a118-2c7f-4e3f-b8eb-5715c3305e9e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1dbad3b4-9195-44b2-9326-272e722818d1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1dd23f0a-5e3e-46e2-be5d-3d31c7ea10cb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e00f04f-1414-46a2-9fd3-d79160c64878.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e264178-4a3d-4ee4-ae7a-6f4981ae8448.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e2eb1d4-ed98-4f69-961c-2635dd092806.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e3c27eb-f8a1-49f4-aab0-4f0db1c0e6e4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e5eb15e-3c94-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e6977cb-af10-411b-870e-366202450f7b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e87cf24-9d5b-4a79-b600-e9cb5e5b8e5c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1e8dee78-d348-422b-954d-cfbc38bb6150.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1eab1092-e6b9-4b8f-b115-77d6f2b9b979.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ec995a8-8af3-4dbe-98bf-63638ee763ce.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ece4e99-6287-4d18-8bd0-0cd7e103ac48.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ed55610-ff31-4942-9985-9ccd32184c77.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1ef33faa-8329-445a-9db4-972666d24e8b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1eff3be6-148c-4fdc-90d1-ea49fd4443d3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1f317cc8-4959-426b-8b50-4940008d4724.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1f5aae26-682d-46c8-a568-d5254504952e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
1f8287a4-c0cc-494e-b41b-d38b631508c1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2016d902-13ea-43fd-aeb7-563e7bca9e4f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
201bcd67-6185-4bc4-ae68-a892dfbbc4db.unifi-hosting.dev.ui.comdevIn scope2026-11-14
20388cbb-0349-4c7a-8804-e1a643f6c2b6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
205c1e7a-e1e8-4bcb-9c39-27f03c0872ff.unifi-hosting.dev.ui.comdevIn scope2026-11-14
206bb5e2-f1c7-4ac7-a596-835a14e2c704.unifi-hosting.dev.ui.comdevIn scope2026-11-14
20b731ae-9533-4669-a8f1-3580e1889d54.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2128e439-86f5-4513-88bf-9f7f5734acb6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
217315bc-4333-431f-ba86-de48f9e43375.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2176129e-42dc-11ec-920f-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
217d5a23-eb31-4e7c-9ec0-fde8a272c798.unifi-hosting.dev.ui.comdevIn scope2026-11-14
217d7581-791d-48db-b6fb-b734ecb614eb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
21c1828a-1216-4ea5-9143-e089bf272474.unifi-hosting.dev.ui.comdevIn scope2026-11-14
21d31ceb-e139-4258-87c1-5a6d4f5f6694.unifi-hosting.dev.ui.comdevIn scope2026-11-14
21e6d1a4-7a80-45a4-a183-1a96c95bbe40.unifi-hosting.dev.ui.comdevIn scope2026-11-14
21f44146-f59c-43cb-85b5-2cc37d78734b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2229229b-3be6-4d40-847a-ea3b6dacced3.unifi-hosting.dev.ui.comdevIn scope2026-11-14
222d0905-4c2b-469b-ab77-a6887f2e5927.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2239d27b-afae-426e-8106-4630f8653777.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2239f67f-df4f-4e38-9db6-5c6d241ed933.unifi-hosting.dev.ui.comdevIn scope2026-11-14
224d7cee-af3e-49ac-9563-2938b6a4799c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
225a1af3-b7fd-4bb9-a5f4-a33fa3537958.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22677f6a-0b19-444a-97f5-2853db748623.unifi-hosting.dev.ui.comdevIn scope2026-11-14
228da895-bad0-42ef-836c-6a3f852997a1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22a40a86-646e-4dbf-a27c-c25f6efd0b42.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22a69004-a621-4c49-9254-c053e7d87992.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22c07177-d417-49b3-aa39-a01394af96ad.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22c7a043-c2a8-4838-bd46-1a06e1476d9a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
22fa6f3c-bf8b-479b-a12a-932693e71a18.unifi-hosting.dev.ui.comdevIn scope2026-11-14
23256323-3bf4-4dc9-887b-d5ea33c1e53c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
232b0a24-ef2c-414d-9171-0b6a49f04659.unifi-hosting.dev.ui.comdevIn scope2026-11-14
23364c34-ed21-45b0-8a3f-306b81b6db9a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
234b7f12-b7d3-4ece-8dd2-dfb3a5c9f387.unifi-hosting.dev.ui.comdevIn scope2026-11-14
238df9ee-f4de-4ff1-b3cc-8e1dba8a4102.unifi-hosting.dev.ui.comdevIn scope2026-11-14
240e5266-7958-4294-8545-614151be54b8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2474db1d-c21e-4d76-a407-0a2afca8235e.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2480ade2-9791-4608-bf95-609b0d0036c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24ba0c98-6760-44f8-bef2-abb5a523b8d5.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24c1bc7f-3ca2-4b6c-8749-3b6ecd9866e4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24d1e845-4e67-40d0-9557-a7d750cab598.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24d59636-6fc5-495e-9c44-393ce2a3d414.unifi-hosting.dev.ui.comdevIn scope2026-11-14
24fc87c2-6411-4b64-912f-24e63a82a274.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25030492-b0d0-48e9-a3bf-48de38cea1d0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2505fd32-340a-4a48-84c6-9b4868f81c27.unifi-hosting.dev.ui.comdevIn scope2026-11-14
2520eb2d-b8eb-479d-b9a6-5f6432317a33.unifi-hosting.dev.ui.comdevIn scope2026-11-14
253340c8-b759-4ba7-aa03-64fc227fb4c0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
259951d8-7816-4137-99c7-a5a36e2b9dd0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25a1b0d0-1f89-4113-ab5d-46857421c881.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25ad2c38-1868-4916-a4f5-e87235befcb2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25b5b2f1-52e0-40dc-92a2-ac931a15bbcc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
25cb8024-9d1f-4d1b-a05b-1887c17e1adc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
262233dc-ae75-4c70-b5ab-36f6f5794ca2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
26417719-bab1-4b58-b392-6ba915ec8af6.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.