high8.2
CVE-2026-32992
SSL verification is disabled in the DNS Cluster system.
Impact
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | from 126.0.0 before 126.0.59 from 130.0.0 before 130.0.23 from 132.0.0 before 132.0.32 from 134.0.0 before 134.0.26 from 136.0.0 before 136.0.10 |
| Cpanel | Wp Squared | from 126.1.0 before 136.1.12 |
| Cpanel | Whm | from 126.0.0 before 126.0.59 from 130.0.0 before 130.0.23 from 132.0.0 before 132.0.32 from 134.0.0 before 134.0.26 from 136.0.0 before 136.0.10 |