Security1 hOctober 27, 2026, 01:20

Analysis: SMA1000 query returns zero in ZoomEye despite 2.5M SonicWall matches

A breakdown shows ZoomEye returns 2.5 million matches for the SonicWall vendor name but zero for the SMA1000 model, even though CVE-2026-102255, rated 10.0, affects that specific appliance. The author argues the zero reflects fingerprint library limits rather than an absence of devices, and recommends building inventory from certificates and internal records.

DEV Community

Open source

Analysis: SMA1000 query returns zero in ZoomEye despite 2.5M SonicWall matches

CVE-2026-102255 in the SMA1000 Work Place interface is rated 10.0 under CVSS 3.1
Query app="SonicWall" returned 2,512,485 matches; app="SMA1000" returned 0
Fixed builds are 12.4.3-03670 and 12.5.0-03082
Third-party scans saw over 400 exposed devices and 135 exploitation attempts

#SonicWall#ZoomEye#SMA1000

SonicWall patches CVSS 10.0 SSRF in SMA1000 as exploits hit decoys two days later

Security

CVE-2026-102255: SonicWall SMA1000 pre-auth SSRF rated CVSS 10.0

Security

SonicWall patches critical 10.0 flaw in SMA1000 appliances

Security

Analysis: SMA1000 query returns zero in ZoomEye despite 2.5M SonicWall matches

SonicWall patches CVSS 10.0 SSRF in SMA1000 as exploits hit decoys two days later

CVE-2026-102255: SonicWall SMA1000 pre-auth SSRF rated CVSS 10.0

SonicWall patches critical 10.0 flaw in SMA1000 appliances

CISA adds two SonicWall SMA1000 flaws to exploited vulnerabilities catalog