ZoomEye finds 92,810 SonarQube title matches exposed online

A ZoomEye API scan on 29 September 2026 returned 92,810 HTML title matches for SonarQube and 11,734 application fingerprint matches. Exposed SonarQube servers hold both analysed source code and credentials for version control.

• 92,810 HTML title matches for SonarQube, 11,734 application fingerprint matches
• SonarQube stores per-integration access tokens and often a service account credential
• Scan tokens are usually scoped broadly to read every repository in the organisation
• Title matches do not prove a server is unauthenticated or allows anonymous access