Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
52c30f8c-bb00-42b3-bfe5-267b04d2b72e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52c925c8-7d8d-41b8-8e81-0abf17c83a9d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52ca5b71-b58b-4713-bbd1-22b13e15d0a2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52d6a783-f94c-4d57-b7fe-0de84c11598e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
52f892fb-18f3-477f-b9c2-16b5640a2b3d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5303764f-ebae-42e1-afbc-18a0c9f6f913.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
531c1537-fc71-4dfe-b1c7-65cc4068a874.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
531fd8a1-907f-4ecf-ba6e-3a35b92bccae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
534721c8-ea72-48ad-a548-fdfffb282997.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
534c8615-ed04-4ed4-93a3-44d0ff030c7c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
534d768e-45b2-4a61-9db4-c9abfa1345fd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
534ffb86-2547-4020-9cea-9522e1cedaa7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5354d925-d876-4273-823c-e8482022f48b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
535cc00f-41b3-4cc2-8454-cc469aacc77e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
535e1e39-7f04-437f-abe0-17548f5d0386.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53658a6d-9b3a-42e3-8d23-6adebb355fd7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5378d606-af43-4c25-afed-30dd46cf5b4f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
537bd32d-5c6a-4e11-a5a8-81a9d8d96114.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
538c153e-7490-43c6-917b-d6df6d89cd87.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53a57e25-6c13-4629-8144-90a2efd7829e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53ba1763-3863-4ae2-82f9-b700db60d7cd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53bf6390-3959-4d70-ba09-3546b486498b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53c3b9af-f1dd-4017-b80e-a50638107bbe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53d11330-8cc8-44cc-9732-4411b86a4060.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53ddf481-08fc-46e1-9865-aabd272a4c16.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53e5cddb-4c73-45f0-a5a6-42feaddba9f0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53ea4639-7989-4342-8737-c799c4cee839.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53f9d0f3-ab96-4785-830d-b1cccc97c43d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
53fed4bb-7e9d-4841-b62d-ff5bad0878d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
540ee6a5-9163-4bba-b912-ac5175c3fd49.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
54130143-a6e9-445b-af04-2b2418b2325f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
542cb044-c1a8-437b-877e-8128a2547f08.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5439eca5-e20d-4d3b-b9d2-f1b8b0e5646d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
543fe95c-9808-4753-9943-b364d62820c6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
544367c9-9db2-445e-a1fd-e840e8de9e85.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
544644f0-9196-4a02-817d-2d9687195161.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5458a5a6-685e-41fd-bc4d-bab9d851c6fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
545ad050-d2bb-4932-99b7-5afee76753db.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
545eb886-cc58-49ee-983e-6164970d2254.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5464747e-1339-4534-b5f5-682e6b085791.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5468331c-a3c5-4b01-93d2-a19d2e2bedae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
546e54c0-1d43-4886-bd2c-62871755e9a3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5475b828-ead7-436c-b767-64bcb123ec06.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
547acb8d-2611-445c-a4ff-b49aed9f74c8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
548c814d-f5d5-43c5-9ca0-2cdc26a11973.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
548cfaa3-cc0e-481f-bbba-5616b69bdf9b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
549a9adf-5e2f-44d7-9d7c-2a2161ee3057.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
549fbbc7-4e48-402d-b3ea-dbe5fbe60016.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
54c893d0-92c0-4668-929b-2ca5b4c4a69e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
54ca249a-e5a9-4ba2-acdb-633ccbb18903.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
54cbd202-0d6e-4028-86f6-1aaea9f24a6e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
54eb459c-4a10-4669-ad4c-a70ba2502827.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
54edfb1a-b5b9-4f64-80c1-c51d0ac5a2c7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
54efcf42-3448-45d9-adc4-d5e869250a96.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
54fbfbf3-e32d-4682-813d-1175d565dd96.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5509f21c-9c34-42de-9adb-b0c7094aba6c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55206223-de46-44b6-b187-7b62d7a32a27.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5520ae31-c1a7-41a5-ab31-3f9d597bc4e6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5520b2f9-a3c8-4b96-a57b-213d3dbfd36d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
554ac5bc-adf5-4fc9-bf07-98af520c9f9f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
554ffb9b-0d78-4f70-b003-c9f9840c3308.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5551a6d7-70fa-45fd-bf94-46a02cca5cbf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
555c9522-a81a-421c-a68c-94679d6502fa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55681757-e343-4ddf-a418-22d1dd4f5134.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5573a74a-f0b7-4cfa-bd32-3f401135b44f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55821645-0f20-4fb9-bc92-a1f9d635d85e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5585a1c7-f369-42af-9d34-6a8502616221.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
558f2e21-965c-4a47-8e9b-227e9aedaefa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55a56192-f4d0-4aea-b46e-a8ca6e593418.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55ab24cc-adaf-416e-97b8-efc31b70476a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55aed54d-7df3-48ee-bd28-50a9a9d8684d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55afa90f-492f-4f7e-9acc-813ca9efe020.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55b8463f-2bec-466f-962e-1dbc125112bd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55c9208c-1ed0-4aca-b28e-6c6f89a35851.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55dd22e1-fafc-4f6e-9313-35393ee0e6a5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55e3de90-9586-4ff6-ae3e-4832b61178e9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55ecbdf9-b611-4dec-9965-a50dca3f2aa8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
55ef6aa0-3028-440a-9bff-d856f6760ade.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
56067465-03bb-4645-a920-e20db01d3a6e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
561bcafb-f9c6-4b59-a75f-1fbc1ada1c86.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
561f35fd-96e1-4581-894e-af98b8e4f6ab.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5625dcc8-62aa-49c7-b150-054ef06deb72.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
56293e15-c1a6-44ba-bb06-3e11b67eabaf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
562ab973-3bcf-4e9f-9ee7-c7fab28ec5f4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5635aa4e-687e-43a3-8c48-fca15d067e1c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
56364eb8-7291-442e-91b6-9d82d1f1cd67.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
563d5cef-b24d-4e34-a565-48736449598e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
563e98db-d4e5-451d-ab92-1b27c5214bfc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
56583f3d-9abb-4011-a849-adeaffc3a4a8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
565c6bfa-4dad-4899-bb80-dd857d3bee3a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
56689d83-2d35-48b9-b214-c7abb0212d6d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5675b2ca-873f-4013-aaff-747b032cac99.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
567791f3-1d70-4fea-ac1b-ba275aa12b39.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
56912689-1a50-4a59-84ec-9c96b2fc5f89.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5698e7e6-6187-4a6d-b0f0-4e4030a279d6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
569987e8-657d-4b07-854b-a8c74a2254fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
569db6e0-b272-44f2-96a6-3b9038008f3c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
56a16fbf-4f2a-4d84-9cc3-e5b60e02a892.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
56a95e7f-0ec8-4d44-8274-f71d4e0f6474.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
56adb564-756b-4ba4-8c18-24962a538658.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.