CVEvulnerability

CVE-2026-32992

8.2 HIGH Published 2026-05-13 Modified 2026-10-26 Official page ↗
Status
Analyzed
Published
2026-05-13
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weaknesses
CWE-295

Description

SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.

Affected configurations

• cpanel cpanel (>= 126.0.0 < 126.0.59) • cpanel cpanel (>= 130.0.0 < 130.0.23) • cpanel cpanel (>= 132.0.0 < 132.0.32) • cpanel cpanel (>= 134.0.0 < 134.0.26) • cpanel cpanel (>= 136.0.0 < 136.0.10) • cpanel wp squared (>= 126.1.0 < 136.1.12) • cpanel whm (>= 126.0.0 < 126.0.59) • cpanel whm (>= 130.0.0 < 130.0.23) • cpanel whm (>= 132.0.0 < 132.0.32) • cpanel whm (>= 134.0.0 < 134.0.26) • cpanel whm (>= 136.0.0 < 136.0.10)

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References