Skip to content

Bug bounty program

UI

Ubiquiti Inc.

Platform
HackerOne
Bounties
Pays
Assets in scope
53
Disclosed reports
98
Subdomains
65,627
Vendor on CyberSIXT
Ubiquiti Inc (145 CVEs, 4 exploited), Ui (54 CVEs, 0 exploited)

Most upvoted reports98

All reports
Most upvoted reports of Ubiquiti Inc.
ReportWeaknessDisclosedBountyVotes
Privilege Escalation From user to SYSTEM via unauthenticated command executionAnalysed#544928Command and Code Injection2019-11-08–553
Privilege-0 to Root Privilege Escalation on EdgeSwitchAnalysed#511025Access Control2019-03-31–82
Public Jenkins instance with /script enabledAnalysed#403402Command and Code Injection2018-09-10–74
Remote Code Execution at http://tw.corp.ubnt.comAnalysed#269066Command and Code Injection2017-11-29–61
Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryAnalysed#145224Access Control2016-11-27–57
CORS Misconfiguration leading to Private Information DisclosureAnalysed#430249Access Control2019-06-07–57
Login as root without password on EdgeSwitchXAnalysed#512958Authentication2019-03-31–56
Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com#172137Cross-Site Request Forgery2016-11-29–55
Ability to log in as any user without authentication if █████████ is emptyAnalysed#215053Authentication2017-08-08–54
Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comAnalysed#301406No weakness recorded2018-03-07–47

Subdomains65,627

Subdomains of Ubiquiti Inc.
NameScopeFirst seen
31abcedb-53ec-46d6-8a55-a580424f352b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
320dad8e-0ee3-4502-855b-b544d31d83ba.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3225c167-c80c-486a-a205-807fde4a6f32.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3252ef9c-7845-4e46-8f16-c483b62471c4.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3256cf67-f881-4c86-a447-7f8f2bccb580.unifi-hosting.dev.ui.comdevIn scope2026-11-14
325daa4c-996d-4529-b987-4d609d5ff40a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3286da3b-dd9b-4e88-a7d9-3bcb9b59b640.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32a7a3a7-2d7b-450d-8bc4-3b71bbfae644.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32c5a7be-57ed-4733-8c0a-ee8a13bcb50c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32cb74ac-01c3-45f3-a353-d52f86647809.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32f25d3c-68eb-4851-867e-5b3c80f6a453.unifi-hosting.dev.ui.comdevIn scope2026-11-14
32ff4a47-ae99-4bc8-9d4a-0d0bb8e8e30a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
336006cc-fd20-45ee-95d0-84e0e975846a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
33a961b6-315e-4ce4-8ed3-d380568e950d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
33c949c2-4a97-491d-930a-c935441b9ed8.unifi-hosting.dev.ui.comdevIn scope2026-11-14
33ceae6f-9518-4b99-9c42-9d2b8d7500d2.unifi-hosting.dev.ui.comdevIn scope2026-11-14
341e78cf-debd-4112-9adc-69b1411f49be.unifi-hosting.dev.ui.comdevIn scope2026-11-14
342ff3a6-9099-4fbd-a3c6-0d2eb194bcfb.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3442d261-9057-4612-862d-a65e0b3d6dab.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34481870-2c1d-11ec-92d6-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
346de4d1-ac24-49a3-9011-5138ec960f6d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3470c623-7d26-4cd3-a662-c4ac76c12c53.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34974b03-f9ed-40b6-b086-9f6c448b091c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34a56228-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34aa0679-6aa9-4772-abc2-1e6ceec7d532.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34adfcf8-3c94-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34b9fde9-e758-4590-9493-719554d93203.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34df8c86-bd02-4e17-bb64-5cede781ea72.unifi-hosting.dev.ui.comdevIn scope2026-11-14
34ef3b2d-c376-4c2d-9dac-2756a3b613c9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
355de78f-087f-4f02-b7ec-46519d8b9c61.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35729932-3427-49fd-982a-40837e014051.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3590164f-f85b-415d-ac14-47a2daebf2b6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
359351e0-2f87-4e29-8d2f-95458bc81270.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35984916-b02a-454f-a831-b216f3a12f11.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35a5507e-1181-4435-96e1-26f0d8257e01.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35ed0c0c-250a-4b2e-a82e-f6bd7c90dc57.unifi-hosting.dev.ui.comdevIn scope2026-11-14
35fdfaf2-389b-4e01-adf4-797bf9d5c195.unifi-hosting.dev.ui.comdevIn scope2026-11-14
362d5e5c-2302-4cb3-bb95-97cd6807ea28.unifi-hosting.dev.ui.comdevIn scope2026-11-14
366425fb-a353-490b-ad0f-cda0ab5fe0a1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
369fc498-3e36-4715-a7be-f370775242bf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
36abcc60-15d4-4795-b2ba-803a54fbdac0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
36bd81bf-3f60-47f2-8179-8e8e39191767.unifi-hosting.dev.ui.comdevIn scope2026-11-14
36ef6533-0a29-4f75-a1ec-a3f616d0efd7.unifi-hosting.dev.ui.comdevIn scope2026-11-14
370fdc27-9cd1-4b79-84fc-f21b0639ef34.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37658cf9-7d7a-48d3-a499-62915d3c7f17.unifi-hosting.dev.ui.comdevIn scope2026-11-14
376aad96-79fc-4908-8cdb-15ab0bc13369.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3773b4b4-7515-4feb-9d2c-ebbbbe208425.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37785294-97b3-44d6-a05d-98b6e7dcc5cf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
377e35b3-f677-4f9e-a236-9b74885d2921.unifi-hosting.dev.ui.comdevIn scope2026-11-14
379f7f96-36be-49b7-a2c3-134399e9a1fa.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37cb32de-70c2-421f-8e25-2c45b03d6dae.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37d619ce-21b4-4624-ac49-37fd793b5a07.unifi-hosting.dev.ui.comdevIn scope2026-11-14
37da2412-c6cc-41b9-a92c-f24390572b85.unifi-hosting.dev.ui.comdevIn scope2026-11-14
38266cd6-383e-4264-a4e4-de11d988b019.unifi-hosting.dev.ui.comdevIn scope2026-11-14
382b2a67-a4f1-4953-9032-0cbd216ff48d.unifi-hosting.dev.ui.comdevIn scope2026-11-14
384becf2-487f-11ec-a110-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
386a18e0-3c94-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
38723f25-6c0d-4fd0-8be6-48c0b68ec67a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
388b196d-7b33-41c9-a9c7-c6c60fba3967.unifi-hosting.dev.ui.comdevIn scope2026-11-14
38e57821-9839-4058-b30c-7deb53559182.unifi-hosting.dev.ui.comdevIn scope2026-11-14
38eed358-acec-4294-b2a5-8e8b68f582fe.unifi-hosting.dev.ui.comdevIn scope2026-11-14
390fb3ef-577f-4371-a57a-ea1b903cf491.unifi-hosting.dev.ui.comdevIn scope2026-11-14
393041b2-4211-4092-b4b4-b1520ace2043.unifi-hosting.dev.ui.comdevIn scope2026-11-14
39384c91-13e4-4be8-b111-f590c61eebe6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
395fa6fa-2970-4ac3-b659-3bf91bba0206.unifi-hosting.dev.ui.comdevIn scope2026-11-14
397c455a-fe2a-43bb-aa0b-6375f8d68a0f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
39809c36-2cdb-11ec-8876-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
399e5d5e-44ae-406d-9b5e-2362b81aa5e6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
39a21232-5669-4e67-8e87-bcc1c897f478.unifi-hosting.dev.ui.comdevIn scope2026-11-14
39b4d3df-0fec-4640-ad95-3bd1ad425d1c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
39b78c59-0d97-4c80-9d8e-bf2581efc1d6.unifi-hosting.dev.ui.comdevIn scope2026-11-14
39c3d8f3-ad09-4fb3-945b-438606fd8390.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3a7f48dd-8849-4c1e-98a5-d2c7bc975d91.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3aa57431-a0b8-4dde-b16f-fc4421286340.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3ac38ed7-cae8-4649-ad46-5629675221cc.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3ade7ff3-ae0e-46fc-bb21-85440ad04638.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3ae80a77-c230-4a50-afb5-800e7ae700f0.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3af56123-0d52-410b-b3d2-5616c4102148.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3b2fbb0b-1ccd-42af-b146-7aaa83bcdc60.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3b35bc9e-42fe-4b4b-81e6-1ff782b9f2d1.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3b38ee8d-283e-461b-b4d6-517e6416ef8c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3b4c12cd-b0a9-4142-99a9-5393d48fe248.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3b974973-351d-4d71-9415-8d5a3c312641.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3ba70f8e-6f8a-448e-9d39-65bca68bc2b9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3bb3a279-b07a-45e4-a111-33878e766fc9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3bbbb8b8-9325-4395-a187-244a3efd8982.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3bf05cc0-b7c8-4e2d-b9db-3085c2ef3852.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3c18fc53-d764-4528-8f6e-ec021cfaff09.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3c417c4c-3c94-11ec-9f0c-0a58a9feac02.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3c9f8352-e0d6-46f6-8dc0-32e003c0985f.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3cafc971-115a-4310-b52c-5b861a297963.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3cbca0b1-5c9c-4d04-a2c4-67f427e97d23.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3ce928ff-8915-4faa-836c-6454dcf5f4ff.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3cfecb71-78f4-4fbd-a00d-2ede14d89b0b.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3d104e87-b6d8-437f-8cd0-052a8bff14bf.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3d30d6c9-91a2-47b2-b2db-ce1cfec9a55c.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3d4b4cd3-7a41-4662-ae41-713a379f60b9.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3d5ea907-8a02-4f09-8782-72a0df7d446a.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3d89dd69-d830-4f32-af1d-3c3c4ddaab65.unifi-hosting.dev.ui.comdevIn scope2026-11-14
3d8bc4b2-f0c4-48ce-96ce-693946a0690c.unifi-hosting.dev.ui.comdevIn scope2026-11-14

65,568 names are covered by the program's own scope; 140 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.