Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
5e7726d9-dbdb-4537-b7f0-ca0fdd9cd650.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e781119-bfef-433b-9630-e37a916aa010.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e7cc66d-4cf3-464a-932a-be59a70c69f7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e85f77a-89a0-4fee-8641-c1eadf794f4f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e8dc8e5-62c1-40b2-93fd-ec755f9f0d95.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e948a41-4714-4222-b453-cd6d4c9014b6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e97e2a6-b092-46f4-a72b-146373dc265d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5e9d557c-039c-4b75-a6a2-cde7d56233f8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ea07c38-3603-4308-8e3d-7d5e23e04b7e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ea9e488-1494-4383-92fb-fb6cfce7f950.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5eab6021-0809-4c71-a077-ac6b72cd4417.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5eb0d9e9-294e-4154-9c51-972deebba54a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ebe1884-6271-4a08-bdd2-95daf1ab7a1b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ec4c083-9d1d-457e-8a56-22865ed963bf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5eec713a-dce5-4d41-942e-2e6caa5bffa4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ef7b3d4-bed7-45b0-8623-33425d571133.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5efcba8e-88f2-481f-8ca4-8264c326e7ad.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f08ad47-4703-4c21-acbc-567c82ed6d52.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f0fe858-1062-4698-b1ed-6bac428e4d86.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f129cf2-e0c4-4e06-a7b1-ada2eb74827a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f1efc13-1351-43ba-96dc-0d98e20e2d82.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f2cab4e-367f-474c-94c5-5247f859b35f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f35d9fd-7a48-411b-bbd1-84a7018acffd.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f3e1602-3eb8-4caa-9091-068195356fda.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f44c9a3-91c8-40f5-992f-15d2af113029.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f44f10d-2104-461c-9a9b-848f6427a8da.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f52fe97-b95a-4b2f-b2df-b13fba940b5c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f535d69-07c0-4554-9638-54beb50b7f07.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f54aaa3-ff65-4d2e-acb2-e6afd55c4116.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f67e8b5-b23b-4048-a53d-aa1cc4029c4d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f72f849-e9d8-42ab-84ae-b4e3f79f14e3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f763db6-4aba-43b2-8e0b-d3757754a9ae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f76c54a-63d7-4b82-bb25-248dc24626ca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f7dc51a-8bf0-4321-b7a8-edd7108bbca6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f8c24b0-1180-4a4e-8912-a13a4bb98522.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f8eb3a3-5619-46c0-9ce4-256d4c48460a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f9170d7-e1b6-4ad6-94a4-c772eb6b9779.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5f9bc885-1ce3-41a7-a1a0-9f8a86174bca.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5fac383e-3e49-48a4-821d-632d67e24c7b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5fb44615-e3fd-4cdd-a609-4989bf3db80b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5fceeadc-fa60-4f06-a8fc-d0c8482ad63f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5fcf4513-98c2-4da0-82d7-c07d64d5b0d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5fd375db-934d-4c43-81fa-0abeb346faba.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5fd7f90d-c51e-4621-906f-29dbc91bc405.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ff4069f-24d6-4190-9152-65f217ca6479.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
5ffb8954-d903-4b8a-bd03-1501cee3ab69.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60047930-262d-4585-a49a-5eb4b24f8c9f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
600bcb60-98c9-4b12-a5cd-0811e09864c0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6010fceb-1b27-4ee9-b747-7da18639b94e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6014d9d5-7ffd-4cec-bcab-1ae0cee65cb7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60282ea7-72f7-4a5c-ac72-159e572c05cc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
602e58ed-fa8d-434b-868c-0226f0ebb3b7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
602eab0a-cf6f-4e06-8b10-dcad95c9fb1c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6036587e-1c1f-4137-9c9f-3098188f7f08.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
603f2d91-da1b-4586-b7e2-ec9b8ed689b9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
604685ef-5916-4909-98ba-e21c78da628d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60558dbd-fd5c-400f-9298-b20edd62a6da.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60585a99-458b-4769-b95b-c7e15e19c7fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6061f328-87ff-4652-8af9-c99ce810c43d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
606d6ef8-1520-4198-b57a-efb7919177af.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60782aab-be81-424d-a972-61293b12b14e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6080a03d-de45-4db6-96fa-b29e2e2ee150.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6090e5df-afe3-4e7a-a94e-7401a0801353.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6098406f-b420-443d-8118-24025551db83.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60a0531e-1cd0-4131-9f9b-fc7a9107eb30.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60ae3d93-2b43-4fce-8eec-35b92d02715a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60aed591-b64f-48a4-a7ea-18bf5b867d9c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60b00938-30c2-4143-bfc3-fb616a8615a9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60b0d3df-409d-4bcb-98b2-62a5ec021b6d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60ba0523-41ee-43a8-bb10-c815dea37cff.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60bc8d6e-49e4-445e-a2a2-5cb4810c325b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60bf6981-70d2-4e62-8d95-82e93d71a845.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60ca7d87-f9fd-4f49-855c-a012f839cfc0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60cdab18-ec55-4dd3-835f-d213677c8278.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60d2f9ae-96e5-4648-9f1b-b418ff3b349e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60d36812-8a67-4db8-8d90-18e28548dfd0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60db01ac-65f7-4653-9443-b711a6b57fab.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60e25c73-3812-4625-8563-5810edc67a8a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
60fb64ec-8314-4a0a-aca2-0868184cc17a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
610a7778-092b-4ce0-9e6d-321acc095a67.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
610cc470-3bd3-471c-9277-74fd56909e5e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
61146f9e-5353-4566-91e1-9465cf9eec1c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
613bf76e-715f-43f0-954c-6b362a5f2892.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
613d2423-a3a4-4ddd-9c4c-9224da17801e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
613fb68d-804b-4f9a-8772-8000d7204f3f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6159a84c-8f07-4fb9-a387-c18f5a3b7ce9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
618630ef-e831-4999-a973-bc6d4915bc2e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
61887ee0-104f-47d4-a363-7951834f6de7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
618af2c1-fd66-4bba-8f64-7e9eb893f3cb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
618da5a0-c944-441e-9d3e-2e85e95a9dc1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
618e3b5c-4cbe-40eb-a5a5-80afa7d904d4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6193b111-1e2d-4444-ac21-8f5213e28e06.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
619dc560-859f-409e-a81c-48e23b8fec32.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
61b65856-11de-4e37-99bc-09977e0c7d43.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
61b66804-3826-42b0-bf0b-6666dc20e3b3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
61cedacd-1762-4218-b5cd-785f5612df14.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
61d21844-0092-45d0-89d6-a32627e4d29e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
61d42526-c363-41e8-b18c-db8725209e8c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
61e12476-a48a-44b0-95a2-a7bbdf907c13.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
61e4ecc4-a601-4e05-a183-4c0904b66e14.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.