Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
6567d25b-dfb7-4fe9-b79e-d094412fb340.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
657858e8-5689-4d86-a69d-73ce9be1d271.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
657a4360-a08b-404c-9314-08cc2ebc8d60.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6582fe76-4315-45c7-9915-2962add1fede.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
658762a4-7352-4d16-bbc9-06e11d2a12df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
658b27e1-15de-4e19-9df0-ab023b05c6e9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
658c34c8-974d-456f-bd74-53b413d2c102.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
659433ce-b4f2-4666-b8a6-17555d422d50.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65965224-4f04-42f8-aa28-b8ae13ce3a92.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
659971fe-3c76-4141-9794-601017603486.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
659e5564-adc5-4510-985d-5924168ff817.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65a971d3-17d6-452f-b652-d1ca9c645510.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65ab3e9f-92b7-44e7-8947-8ef3f26badb6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65ac388e-3485-4ecf-a632-649cf7cbdeb5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65b75e7c-ce92-4308-9415-325f5f30c046.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65bd4d80-0689-4475-a155-978bbf4757d7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65bf5fd5-fef9-4f6c-9bcd-41dfaca6db5f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65c80cd5-f0b8-4080-bc00-beaec6c3c889.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65e2b0ce-ff37-4a28-8d8a-7e25ab1c7f4e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65e60c5b-3303-4230-a83a-7e2cf042dec7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65ea37db-2345-4223-99c7-2c0d5672fc40.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65ef9905-ab91-4ae4-875e-5d21486f1749.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
65fdc77f-f4cc-4aec-8d0b-d325ce122293.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6603ac1c-edb6-45a9-b408-0be3996a126e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
660be75d-40f9-4474-8c15-60986b747321.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66173cce-6365-4358-bc2a-5e2e2a231a1a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
661eb11b-05a8-40d7-97c5-d7cd05477031.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
662531c1-d9e5-457d-82da-fbd2d371340e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66277538-8947-41c5-ac8c-c5f4caaa7ed8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
663a65ef-30d0-42a5-80eb-a17b1a87c6c4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
665b3b07-31e2-4908-aa8e-821583ee4d8b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6660d477-c6d4-4cbf-94b1-6a87f67b0174.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
666b7290-8722-4129-8570-d68d6e0ccd73.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
666ccd09-3341-4622-9284-7707999ef27c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
667474c7-4d15-4af7-92c5-428c2be4e3a7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66750988-018d-486c-9b7d-6384864470ef.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
667a90e9-ed49-4288-9818-df84db00b446.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6686fe4a-ee6f-4024-8b70-68d103d74116.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66b113af-18c5-4386-a879-0a5f49263e6e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66c876da-2d67-48c2-9778-c40235604ee0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66c8d4d5-b22a-4c6f-902a-8329db963157.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66c8f0e4-f0b2-4b79-bcd4-aa9012e555ee.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66d94cf8-3b00-483b-825e-b8098dc114d2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66f51aeb-8554-474d-930c-531d9d631cba.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66f7903d-f197-4491-b7c1-f6f691715d0a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
66fb47e0-3846-450c-9f10-400ee56ca723.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6700b8f6-8707-471d-8a40-6a5c090257c3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
671d4d9e-1fe5-4de7-b4bb-2a0eff5069b1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6729c1de-0e73-4da5-8371-b77ef204cc04.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
672a09b8-b884-466d-9225-5e5311d8d14d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6730446d-9e3b-4867-9c4d-641661fc83ae.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67445575-14b7-475a-8277-9da463a393fc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67448bc6-2397-4008-aab9-46133ce26049.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
674506d8-de6a-46e6-9fa4-2d4a17a8cbf5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6746b5f5-793f-4ab5-bd72-5feb075570b4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
674cc517-412c-4a1c-bf6d-46b348caf066.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
674e52e5-534f-4081-a2cb-9f7d9fb225c8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
674ee3d7-763f-49fd-ad3b-4bbd5da8a803.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6769b79d-d8ac-4232-a187-cabe911fccfe.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
677303e2-305e-4fd6-8363-e9ddf813a4f1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67737b7c-9556-4797-9ad1-f2bff68432d1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6786fbc4-1216-429e-b31a-2e09680b19a2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6797f26a-be90-47ce-ad69-1de8b7c72d58.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
679d3d60-6278-48f9-96ed-c99c3e14be60.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67a6fd5a-a6a1-4072-8479-a562a53e2c6f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67a7ad37-fd24-47c6-9d1d-0d8cdb1f7314.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67b91aad-b284-4d08-a060-19c9315eeb80.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67c2c2cd-b984-446f-b674-abba4aa85e96.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67d135bc-c661-4737-ab9b-36639b910e4e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67d56f20-3b21-40a5-9ba7-03e4d0bc5286.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67d96d7a-410b-4aad-807d-96f1beea6948.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67e5987d-86fc-4932-9216-858498fbb722.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67eab41a-02b1-4063-a0b1-7be81195c009.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67ed12f9-780b-4088-8415-2b14acbd425c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
67fb0b28-ff5a-4f85-b22b-5d19d5422771.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
680858e1-3d40-44e1-9a9c-14d671260b4c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
682003aa-daed-4ebe-8144-83649b5b899b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
682ccca7-2dd6-472c-aad8-e235e9b2d63f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
683832f7-e422-4d31-b265-4c0128721e4f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
683d56e3-e0f8-4dc3-960a-2f1a39906eb4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68470a72-8565-4ac4-930e-8e571ba9d258.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68473efb-824c-4922-8a72-a2a81a68ca57.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
684d0a80-ce50-4394-b103-eb69f818ea82.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
685ab330-ff93-4d69-9977-63170855f739.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
685bc683-35c7-49ce-b4d4-4b00aaaf6bd1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
686ed87b-4b41-4b46-b6b6-3290e27a0ccb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
686f545e-1c85-4a9e-ab32-e6b44dc84778.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68863a83-5db0-487e-9724-ee2eeec54b7c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68892747-9bf7-4483-87a5-1a97b404c3c0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68894a04-4a9f-459d-aa1d-8d4cbd757ddf.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
688b8956-4f2a-49e2-ab28-949c14f9a892.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
688ee465-d5b3-4ce0-accf-f91ab5c3862a.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
689b650e-d1a9-440c-b463-18a0971dd081.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
689c04c0-0bdb-4e09-9d3a-99ac6d50b649.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68ad25e9-d862-45c1-959e-2d4d71f76a31.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68afd289-e3fa-478e-8af1-af3dc869c3c5.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68ce63b3-a856-4342-934b-882619c127f3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68cef281-a687-46e1-88f7-66f26b179666.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68dbd676-fbd3-44e4-a97a-d1d479036ca8.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68eb1ae3-29ce-4ced-8c98-c20ee58cb1bc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.