CVE-2026-32992
Full vulnerability record from the local CVENow database.
Description
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
Severity
HIGH
CVSS score
8.2
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-13 22:16:43.010000
Last modified
2026-10-26 14:10:00.130000
View original CVE JSON
{
"id": "CVE-2026-32992",
"sourceIdentifier": "[email protected]",
"published": "2026-05-13T22:16:43.010",
"lastModified": "2026-10-26T14:10:00.130",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials."
},
{
"lang": "es",
"value": "La verificación SSL está deshabilitada en el sistema de clúster DNS. Esto podría permitir que un servidor malicioso realice un ataque man-in-the-middle a la solicitud y capture credenciales."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "WebPros",
"product": "cPanel",
"defaultStatus": "unaffected",
"versions": [
{
"version": "11.136.0.0",
"lessThan": "11.136.0.10",
"versionType": "semver",
"status": "affected"
},
{
"version": "11.134.0.0",
"lessThan": "11.134.0.26",
"versionType": "semver",
"status": "affected"
},
{
"version": "11.132.0.0",
"lessThan": "11.132.0.32",
"versionType": "semver",
"status": "affected"
},
{
"version": "11.130.0.0",
"lessThan": "11.130.0.23",
"versionType": "semver",
"status": "affected"
},
{
"version": "11.126.0.0",
"lessThan": "11.126.0.59",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "WebPros",
"product": "WP Squared",
"defaultStatus": "unaffected",
"versions": [
{
"version": "11.126.1.0",
"lessThan": "11.136.1.12",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 4.2
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-14T13:12:58.222950Z",
"id": "CVE-2026-32992",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-295"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "126.0.0",
"versionEndExcluding": "126.0.59",
"matchCriteriaId": "CF4EC0BD-A3D9-4508-A203-AE7C3FD7B7B4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "130.0.0",
"versionEndExcluding": "130.0.23",
"matchCriteriaId": "3C684F0A-4C2D-44DD-8AFB-EDD961B37161"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "132.0.0",
"versionEndExcluding": "132.0.32",
"matchCriteriaId": "C72D46EF-7010-4BF0-B227-4FB6F2594956"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "134.0.0",
"versionEndExcluding": "134.0.26",
"matchCriteriaId": "1111E4FB-BE6E-46B6-B506-44B396A4104A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "136.0.0",
"versionEndExcluding": "136.0.10",
"matchCriteriaId": "0193B98A-BF31-48D9-A0A0-F5FEB8E8EE45"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:wp_squared:*:*:*:*:*:wordpress:*:*",
"versionStartIncluding": "126.1.0",
"versionEndExcluding": "136.1.12",
"matchCriteriaId": "1F3FC4DA-3AAD-4EBC-83C2-A805709A02D0"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "126.0.0",
"versionEndExcluding": "126.0.59",
"matchCriteriaId": "1DC95DCA-C5D9-48F6-BBA9-7A5AE81DCFEE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "130.0.0",
"versionEndExcluding": "130.0.23",
"matchCriteriaId": "2A46F223-05E9-4B7E-86DE-3FC2B33AAE91"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "132.0.0",
"versionEndExcluding": "132.0.32",
"matchCriteriaId": "0C1C3084-F8B2-44BA-8BEA-0EB13D746061"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "134.0.0",
"versionEndExcluding": "134.0.26",
"matchCriteriaId": "C6AA26F4-2086-46CC-AA7C-6BACBFF7688B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:*",
"versionStartIncluding": "136.0.0",
"versionEndExcluding": "136.0.10",
"matchCriteriaId": "A3C3BB3C-A3AB-4F56-BE36-F7BC14BB7554"
}
]
}
]
}
],
"references": [
{
"url": "https://support.cpanel.net/hc/en-us/articles/40437241987607-Security-CVE-2026-32992-cPanel-WHM-WP2-Security-Update-May-13-2026",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}