Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
68f250a4-cb77-46a7-9410-aad86edb9e75.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68f28061-78e3-4766-aa4f-a631a62696b7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
68f28f30-2947-477b-8349-8f7fde978c90.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69004556-1c44-4ba9-b6ac-e885744fc010.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6902e0ec-7ef9-4654-9cc3-f08321744117.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6912601a-8398-4fde-8f7e-068eda28ce9f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
691420d9-672e-4a40-b8b3-e85081397e26.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6922ca2e-2e46-41c2-9cb0-c185562c3a4c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6922fc92-e1f5-4a79-84ff-e70102728d03.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
692ddcbe-9d1c-43ab-8ed7-03688198460e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
694c09ce-e3f1-4314-a889-89af3899cae6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69576410-138b-4589-80b8-a0eb00ddda59.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
695c6f01-d631-446e-bbab-90f2d7581b32.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
695c7591-b404-4a86-bdc7-2bd49a54e56d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6975e688-6320-411d-9bdf-2d231b53b53c.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69885c84-25df-43be-b6d6-991e3bf92a59.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
698f3a1d-ad82-4da9-a12d-ab106b511c90.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6994014e-5154-43db-b39b-23ee3866c5ea.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
699ecddd-31a7-42ca-875d-6f7d46810538.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69a603fe-7f2e-4dae-aad6-7f85989f4637.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69a8c7be-e0b3-4a14-a541-bec6ee50a0ab.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69b00bae-cecb-4818-8741-8325b7c38220.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69d32722-7dac-420d-8917-d13dc3e810df.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69d794b0-9bcc-448d-acc4-eee03d291571.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69db36ed-6ed6-4341-8dbe-1b5ab8950208.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69dd9ff2-0f4e-4c59-a3cb-4de64541f9d2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69de2a5a-be21-4f1d-9e15-c5237b7bd2b2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69e755be-e2b9-465e-8e07-1bd7d0e4b7a3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69e91715-391b-429c-ac31-aa21b386f60e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69f03875-b268-4461-ad84-4aea744ac373.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69f09d9f-7165-4a51-998f-b51e603e08e6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
69f82557-4720-4e20-b178-5c513f781967.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a03de7f-a531-4968-90f1-c0a8ec142199.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a1404e3-b9f2-451f-b300-724619933040.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a163bf4-7452-4fd1-b775-f82bcd809dd6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a186d4c-845a-4d43-9794-3dcf8cc55fee.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a3c713f-7fbe-4327-98c4-792cb9d3cf31.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a45110b-6c9c-43ee-b690-c0097732e0f3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a6e1c2a-ec95-4c16-9e94-6fa2ef69e6dc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a7819dd-924c-4915-878c-bb0a6fc13739.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a7847ed-5c6e-44b8-9aff-11dde4c25a99.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a7db69e-528c-476d-b920-e394eaea3064.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a7dd820-a66c-4db2-9f2d-45f5342d8a7f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a7dea9c-84cb-4bf6-bc57-3bb8a3e4f475.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a962614-9035-4d42-a8a4-678e77bd45a0.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6a9d46c2-2a64-49c6-8d1d-e6c8aa7cba35.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6aad3842-d974-4ea2-8a4c-4cbd96303d23.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6ab0ef62-334c-4953-9a95-6c2ea71baf46.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6abcb66f-7243-443f-bfa4-edd35e351e8b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6ad02498-1a94-4eae-82f7-944293f92ed9.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6ad6254d-0af3-48ea-8f79-fa620e7f87b2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6af0067b-5c15-431b-8544-ad7c120d0907.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6af2797f-6c5b-4976-9a0a-cd71bf9fe69b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6af2da7f-7031-4efa-ae3e-f3e628ab7fe2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6af3b231-ebb7-44ba-a561-551c40db08dc.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6af7cd3c-14b3-48dd-b733-725b216c6b0b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6afef276-64d3-465e-b7b4-1a83e98220f2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b076a45-5dea-41aa-85a5-69db148927e4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b09544a-a53e-4887-80fd-f3f3a5871994.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b1500ae-880b-4bcf-9b87-73b10a8a95c4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b263fe1-e357-46d5-b78b-9c081b05dc98.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b364405-362d-4f1b-a022-ddd6040d60ed.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b4172da-a3bd-4d7c-a5b1-9c8e4b0c2bb4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b41f454-bc8e-4121-b5cd-e517f33cb0db.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b47ab31-eb21-4933-9b39-86ab03d62cd4.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b5318ff-b25c-4bbd-90d9-95ad5f291689.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b53d2a2-703f-4973-9b79-f81477cb42b2.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b55d0e6-6693-4921-bd3a-b879d3f9f265.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b674ac9-c192-4903-9b64-0bcbcdae7076.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b69aaa0-f44f-4f1b-b136-d93dc6e77184.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b791c1a-fa57-4474-8b5f-1c1061540c66.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b87fb1f-ed71-41ab-a15a-f484e78b6f65.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b95b35a-bc44-464a-b7c0-b207528d52d1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6b9f57fd-b8ab-4c20-9eca-36f1beb6efc1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6ba47a27-8f5a-41dc-bbc2-38f6f2be903f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6bb39de9-39e0-47f0-ab8d-ba13a40fe559.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6bb6ac04-1bf7-4289-a2ff-8c3174f98feb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6bc2dceb-21bb-40c7-9045-b3dd603eb824.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6bce9430-91c2-4ba7-afeb-5d9d4010770e.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6bd9859e-4330-4aa5-8c8b-5664dacd7d68.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6bdf0541-fb0f-4e33-8837-607f167a1e14.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6bdfbec3-f4ef-4d09-a82b-6a05a1a91219.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6be17c64-9bad-48cd-b6b4-e7dcb70c6040.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6be49405-5bde-465f-849f-ffbfaa550696.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6be94441-0669-4e38-84b5-ed813e3c4883.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6bf6b073-40ab-4063-be54-0cbff9bd8384.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c05cd74-ec98-4890-91f6-b0caf3cae327.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c1cf74e-0edc-42ca-a6a2-b63ee58859c1.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c26fff4-ac21-4dab-a164-c3b6d98f4c7d.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c3e35f5-6f48-4b42-ba75-053c2962592b.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c49bcbc-617f-4d08-ba22-a17bd8c967c7.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c53b010-1c7b-4ad9-b27e-48f87468de80.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c61107f-4d72-4115-99b8-3338abf33b6f.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c68380a-5e7a-4c4c-8f4d-7d7b27186bcb.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c709183-6136-4d56-9c1d-804dd5c9ac64.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c7f35ca-9015-49f4-a57f-ce863406a8c3.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c845e88-ad90-4b09-a604-fa8cec1f7b66.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6c84b423-881e-4cf0-b266-0b922c2be7f6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6cafc2df-63a1-4888-b079-f50b215dbed6.unifi-hosting.stg.ui.comstagingIn scope2026-11-14
6cb33468-ce81-4e66-a9c8-9ba8df157f10.unifi-hosting.stg.ui.comstagingIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.