Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
5a6a2c50-b96f-4d01-93fc-641517d2fbfd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a740776-8908-4b3c-b73e-591e4be950aa.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a7f19d6-80a7-49d2-85f4-d5d73157c052.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a822c2e-5cf4-4b41-a120-2d66e2818d12.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a826158-b438-41bd-85ae-b72fac84f9f5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a8d208b-0f97-44f5-9888-46e16885eef3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a8d5565-522e-476c-a5dc-6a7abd8897c6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a911710-7b29-4662-abb5-497716e469b6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a9727aa-cd38-40a3-a766-6d81989d1c76.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a98cad0-ed39-442d-95f1-2d7006180617.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5a9d95f9-27d5-4bf8-b156-0959d67ab6a4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5aad5119-5146-417a-accd-f98904a38ed7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5abe0c3b-7c28-4973-bac2-29bf77a8e431.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ac1e352-ed06-4842-b18c-5030c05a8225.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ad67e72-c819-4dd8-8420-3af739020997.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ad7e117-ba4d-4757-980f-e0f66275a50e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ada23dc-cb47-49c7-9df6-a720ad7b3047.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5adae47f-d3f8-4226-8c69-28c04dcce90d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5aef3ce5-cfa0-4514-b580-e68d84ef8834.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b05ae5d-9f5e-4523-9d2c-84728319dae6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b0f6e44-6510-4aed-939c-013e0d3b7243.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b159fdf-b1c6-4976-8a96-aaf9b58da44a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b1fccc2-3899-464f-acb9-dafd1b48509e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b27a111-e9bc-4eea-8ecc-88a494668a63.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b2c8cbd-2a69-4e61-af46-76d2412e4345.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b3417b5-4624-43df-bd3d-ec32b5d2af48.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b42d6c2-5a15-4ab3-94d1-81410245c607.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b551d38-1822-4f95-b5bd-63b91331a3de.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b5ef37c-91ce-4be3-8860-91f296df1426.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b619707-a74d-411c-b469-cf99f8390b44.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b6253a9-f6fe-4220-bc45-8775c89fa875.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b66ebe9-d589-4965-ab09-b191c71f53be.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b74e5d8-eabb-4620-9c3e-81bc18cda297.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5b984e93-7e1f-45ea-b088-5b155dca3ed6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5baa44b1-9240-450c-b839-4f326d76b6fe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5bb4ec7b-1b4a-46ba-a348-1ad9dbde8aac.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5bc3a367-6659-4366-80f3-25861532be5f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5be3e0db-320b-48bb-b7ec-0dd8af9c91d4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5bf465f0-541c-4d54-ba14-dac7f26c8ef6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5bf6856b-008a-4cd1-a993-fea0a4b284d8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5bfde510-1b8e-4ced-b652-3e5929e27fa6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c02b543-9833-4c61-9916-242be5a4ae7a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c0394bc-6131-4c2b-b95e-1a3bcff21799.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c125727-3140-439f-948b-27112581f601.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c209426-0016-4c4b-b24e-8b7426168c9e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c31df6c-ac64-4454-88bb-f290e7e412e1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c321375-ffa3-4a71-8760-d224e84a67cd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c352fa4-45c0-48ee-8784-2805902cb4ed.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c394862-c030-4e64-90ab-9b7a9fa3b1e7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c3b542b-6e9b-45a4-8c0a-b5cfbab50f4a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c3c96a8-3261-4502-9b1c-ce108892af2b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c584f94-5bf6-4dc9-9464-e636f53c8b74.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c5a73d8-49c5-486f-9c67-c2ab5d48db46.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c7a29a3-5eff-4724-a04c-c6aeaaaa18ab.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5c872967-329d-4d55-87a3-93c8eced9ac6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5caad0fd-588d-4200-8161-39f5aed7380e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5cd0b241-5a65-406b-a4fe-4436d6974f09.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5cd7ff40-fd42-4e73-aa2b-e3d34527cb59.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5cdbbea9-8f1e-4776-b0d4-1d61e6290d31.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ce2c205-944e-4e94-88be-452b8dfcfe54.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ceecd52-1961-4d65-8dfb-2e4e29e0897f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d036bac-58d8-4c6b-8fa8-4eedb364853a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d099b8c-d828-440f-938e-bf6d5a831245.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d16d872-ef03-4245-a599-70bd30c4571d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d1b8013-1b73-40da-8491-9072288580dd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d1e8059-18b3-4ba9-ab94-d3b715ddf8dd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d23ef0c-bdf8-4852-a8e1-52f3319eff89.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d2d81ef-137a-481c-91b5-53f31d890659.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d353e3d-e041-49b2-be78-e3bf4a4f69ab.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d39c9f4-ee66-486c-9008-3ec5797a2027.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d54d597-9468-40af-8032-243fc7d6390b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d5907ea-dc23-41e8-bf38-5f0fdff8fbb1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d598f7d-324b-4adc-8812-efa4d378a3a8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d60baab-6ff7-416f-a157-3d1c74394e77.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d6cc301-81ce-49d7-8cfa-0719ee2ea80f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d727386-8687-44d3-a5f5-f924977105b8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d7c3e47-5c10-4b3c-9ffc-e0155ab4aeca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d7edb62-ca4b-48ca-bb0f-59f569fce088.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d8c42a3-508d-470d-87e9-78ce172a5788.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d8d4b57-8fcc-4421-82d5-aca534f8048f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d9236dd-6003-4e45-9d72-d0a37000006e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5d9f166b-161a-458e-9c13-ce4bb90a402a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5dad2200-2bfd-47dd-abe6-1a66d64a296e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5db7013d-3f2c-43d9-bce4-429728651c72.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5dba97f0-1705-4a13-8aca-0c1a529af31c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5dbe37da-8936-412a-b4c1-f3033b83bbcd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5dc0bbad-d09a-4f33-940a-3e8efc4fe35c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5dcab771-8be6-4142-b9b2-b5f8d17e6960.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5dde7557-28fd-41ef-8f2d-ac5828d745a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5de19361-f3d5-4496-ab96-ab53e640f7d3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5df3c494-79f0-4d39-9ce3-5c5bb3286f2f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e011aae-3dd3-4e1e-bbb2-91ddc7c06411.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e057703-9f6e-4cd9-b0e6-bd44b88ff572.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e22ce75-5f89-4850-9e10-d1a663609557.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e41eb6b-b25c-4b73-8c17-fb0fe1c4784a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e446580-7171-4bca-b32f-ebb9f1011d60.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e55db04-5a2c-441c-8faa-047d811b9d60.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e69d650-20d4-4adf-abba-32ca1ca399a2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e6c088e-5f32-46d3-a61e-5c7c0089f6bd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e7260e4-f0f0-475e-ac65-b5caddce1953.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.