CVE-2026-32992
Analyzed
Analyzed - Analysis Complete
BaseFortify
Vulnerability report for CVE-2026-32992, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-05-13
Last updated on: 2026-08-12
Assigner: HackerOne
Description
Description
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cpanel | wp_squared | From 126.1.0 (inc) to 136.1.12 (exc) |
| cpanel | cpanel | From 126.0.0 (inc) to 126.0.59 (exc) |
| cpanel | cpanel | From 130.0.0 (inc) to 130.0.23 (exc) |
| cpanel | cpanel | From 132.0.0 (inc) to 132.0.32 (exc) |
| cpanel | cpanel | From 134.0.0 (inc) to 134.0.26 (exc) |
| cpanel | cpanel | From 136.0.0 (inc) to 136.0.10 (exc) |
| cpanel | whm | From 126.0.0 (inc) to 126.0.59 (exc) |
| cpanel | whm | From 130.0.0 (inc) to 130.0.23 (exc) |
| cpanel | whm | From 132.0.0 (inc) to 132.0.32 (exc) |
| cpanel | whm | From 134.0.0 (inc) to 134.0.26 (exc) |
| cpanel | whm | From 136.0.0 (inc) to 136.0.10 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-295 | The product does not validate, or incorrectly validates, a certificate. |
