Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
4f3e9172-c9ba-4ab5-8c5a-66a988dfa85b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f582ce7-0485-4c58-b476-617e79bd6a2f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f59e016-d564-4ca8-aab5-7a34bd0b60d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f5c3cc2-b72a-4261-b967-a21a2dca3aed.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f85f226-bd15-4439-938d-fa3500004168.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f939786-f4b6-41a2-8eee-75ae9602113e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f94760e-e1ae-4d23-bfd2-2ce5cab841df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f94e82e-0617-4b80-9d8c-de3802fa132b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f9703ec-b05a-4600-b0d7-34e03839a42b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f9a2268-ccbf-4312-bb70-2b712d3467aa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4f9e834f-95fd-4222-b651-4dceae62f69a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4fa6ec50-03fd-46d9-9813-bf9d53ffd42d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4fa769b7-42ba-4408-8c60-af32661f8bbc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4fc99f54-4113-4567-bc31-8a242ea6e09b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4fce389e-c861-4af3-adf1-fcca3277df04.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4fd8e2d4-dfdb-4e26-abcc-819212208665.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4fef77df-2407-4f20-a087-a0215242ff87.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ff72653-c343-47f3-a240-1c7f86379699.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
4ff9975f-f58b-4388-8775-1612dde57755.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50023868-5ec7-4003-9d59-177c150f3f03.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50164d9e-fe69-4a44-b2a4-1bae62ecda5e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50205e51-1e03-49ac-8a91-0b5cf401a521.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50310de4-f17a-4a26-9ea4-197005c88427.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
503c76c1-afb2-489e-a763-991f2d2ad07b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
503ee315-342a-4b06-8d1b-93ba5afe2175.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5049d441-5133-467d-906e-02b87424eb61.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5050b814-1adb-41b1-aee2-7f9aa485cab9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
505301c9-17e4-43a7-810b-3d1c8c21b78e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50541081-fd64-49a9-b47e-8a695a337480.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5085b720-13ca-4663-82c2-7f077f3b0f10.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50891216-d8f9-4c3f-beb3-2a3a7fcd07aa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50893326-f8a2-4cff-93af-2a7f611133e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
509a1229-a9c8-465b-9abd-5fcdd5163b99.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50a6a13e-6618-44d2-8790-38f55d5e4237.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50b29378-db6a-40e6-b1b6-1bb936a5570e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50c55fa0-d7d9-4651-aadf-be2e3af3e568.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50c7d8ec-5e01-49ac-9aea-e672870efe22.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50cd4ea3-01ca-4d12-a029-b37ce47c6d5e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50ce46fb-e63d-4005-aee1-101712af64c0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50da6c3e-7477-4323-a322-18cde65ec99f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50eca12d-1332-45f5-ba3c-0427bbbf4eb0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50f1227e-45f1-4d99-b6ae-299723ae787a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50fbac63-0550-403a-a38a-7a646a808e30.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
50fd65a1-75cf-4d7e-97d3-7cd7358c4ef0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
511052dd-0284-4d88-aa28-3f34da99bbfc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5111ed73-ebc5-4c8f-9ebe-35005f7dd197.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51154eb1-ab4e-47a4-8931-81dbe022d1c3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
511c0e1d-ae7b-4034-81c8-42010b20a8ef.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
511c567b-d83e-49c1-8295-085479d2b2a1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
512876ad-5620-49da-b59b-a32d8498851d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
513537e2-71c6-43df-a1fc-53b2929c08bf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
513d4fc0-a44d-493e-aea4-806de9d4b527.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5141f93e-e734-4b50-8305-0d973bf9aab8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
514c90b4-d826-44f3-944a-85c4a181573d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51549032-972d-4946-9ef8-d9277065ab5d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51581046-3593-4f2f-976e-480062b497c8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5168e98a-8a9d-4d4b-b019-8ca5eb4eec4e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
516aeb6d-4cb3-4a85-99d1-4949286a7ddf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
516beb40-ab25-492a-8c4a-4f9a811a5143.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
517ff384-682a-4da4-8ce8-dfb8291cd9ae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51838ae0-9e42-4b9c-a7ea-d757cad71b46.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
518c0a59-fe84-4b6e-bcda-4c15e05bcf34.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5190604f-e7e3-407d-8d01-cb54043c2893.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51a7f7b6-1fb5-4eb3-a20d-5ee4c9690899.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51b50a16-1dfd-4b7d-9002-fee7ecbc2fcc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51b94b4f-8ca3-43d7-9ed2-31a86b077542.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51c192e9-70fc-4db6-8e78-de05ca8aadb5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51e06027-b15c-45d8-81f6-39f67efd709b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51ec844a-02a0-4192-8739-e1d206691ead.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51ee0444-df80-4441-a1ad-02f14f9f268f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51efea8b-73ba-4ec1-ad14-08f3cb045cf2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
51f5cab9-0d2a-4d1c-8c53-f5f4bbdff2d9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52073aac-6aa1-4d11-b101-77a96567cb36.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52112bc2-4a7a-47c3-a1da-762826de4902.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
521b6494-28d0-415e-b333-3443bcf874c3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5226e9c9-9d69-45b4-956c-59c8349a3034.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
522c2539-679e-4f4a-b7b5-05c970d1d950.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52444a14-e7c9-4852-aa2d-3a48ba66dd0f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5247cbf5-0d25-4aad-b632-503bf7ef6ae0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
524fe5e5-c829-4031-b250-2c5a5a0fffc5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5258825d-ad93-47ad-971b-3c22f9d19fc9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
525951e4-3234-469c-a417-85440066d7e3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
525bc7a9-3b81-4630-9b49-f5bb9b08a11e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
525dd49e-0ced-4476-bd2c-bce80e40a11b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5263c881-8298-418e-8054-6603259acf68.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52642483-eaa4-49c3-b8e9-7a1dce687712.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5265ba24-3740-424b-a421-a344f1f937fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5267e002-47a4-41ae-b3ab-f93b3fce37b7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52776fd9-fc91-4989-98fa-48238f26cafc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
527a6125-8bf7-4775-806b-763974e23a25.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5280073c-0932-4eb0-a58f-5bdcad59ef84.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5287113b-047c-4f59-afdf-2c49ada571fd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
528c89dc-f1ad-4dcb-b836-a07e47e25a78.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5293eb7e-303f-4ca6-b408-10679dab03d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
529c3342-f7f6-4c05-a40e-cc5f75f443c6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
529feaed-98ca-4b1e-aba2-47353e00463e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52a0ca59-792e-41e3-9fd4-ac21b1aecc5b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52ab9256-df71-4ef0-9f86-ea2a68666834.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52b199fa-568d-4c0f-be8e-dc55689598cb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52b65e13-138d-4375-a333-aab683533fba.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.