Edit Classification: Sonoff S26 Smart Plug (S26)

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

1. General Information

Product full name *
Brand * (see Category:Brand)
Parent company (see Category:Brand)
Website *
Release date *
Generation / Model(s)	Gen: • Model:
Type/Category * (see Category:Product)
Status
Dimensions & Mass	Dim: • Mass:
Operating System & App	OS: • Companion App:

2. Hardware Specifications

CPU / GPU	CPU: • GPU:
Memory / Storage	RAM: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity:

3. Security Classification

Device Security

Criterion	Value *	Proof URLs (Paste URLs directly)
Known hardware tampering	None Rare Very common	https://zone.ci/secarticles/wx/582750.html
Known vulnerabilities	None Rare Very common	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf
Prior attacks	None Rare Very common	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf
Updatability	Very common Rare None	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf

System Security

Criterion	Value *	Proof URLs (Paste URLs directly)
Authentication with other systems	Full Partial No	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf
Communications	Encrypted with up-to-date encryption Encrypted with obselete encryption No encryption	https://dl.acm.org/doi/abs/10.1145/3411498.3419965
Storage	Encrypted with up-to-date encryption Encrypted with obselete encryption No encryption	https://zone.ci/secarticles/wx/582750.html

User Authentication

Criterion	Value *	Proof URLs (Paste URLs directly)
Account management	Full Basic Absent	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf
Authentication	Secure Basic Absent	https://zone.ci/secarticles/wx/582750.html
Brute-force protection	Exist Basic Absent	https://www.bitdefender.com/files/News/CaseStudies/study/389/Bitdefender-PR-Whitepaper-Sonoff-creat4984-en-EN-interactive.pdf
Event logging	Access event logged Partial logging Absent	https://zone.ci/secarticles/wx/582750.html
Passwords	Require change after setup with complexity requirements Require change after setup Default/Common/Easy to guess	https://sonoff.tech/

4. Reserved for Admins / Sysops

Latest classification date
Grade Calculator version

Free text / Notes:

Overall assessment: The S26 inherits the eWeLink platform weaknesses documented by Bitdefender: the cloud API does not verify device ownership, and the short device ID makes remote takeover by guessing practical. Physically, the enclosure opens easily and the programming header is exposed with no Secure Boot, so firmware and stored credentials can be extracted. OTA updates exist but the update URL itself was part of the reported attack surface. This is the weakest device in this batch. [[Category:Classification]] [[Category:Calculator v1]] [[Category:Sonoff]]

For new submissions, pages will appear blank until approval.

 Summary:
   This is a minor edit
 Watch this page

    		Cancel

Anonymous

Search

Edit Classification: Sonoff S26 Smart Plug (S26)

Namespaces

More

Page actions

1. General Information

2. Hardware Specifications

3. Security Classification

Device Security

System Security

User Authentication

4. Reserved for Admins / Sysops

Free text / Notes:

Navigation

USER

NAVIGATION

CLASSIFICATION

ABOUT

SUPPORT

Wiki tools

Wiki tools

Anonymous

Search

Edit Classification: Sonoff S26 Smart Plug (S26)

1. General Information

2. Hardware Specifications

3. Security Classification

Device Security

System Security

User Authentication

4. Reserved for Admins / Sysops

Free text / Notes:

Navigation

Wiki tools

Page tools