Findings

CVE-2026-32992

SSL verification is disabled in the DNS Cluster system.

Published May 13, 2026 · updated Aug 12, 2026 · cpanel cpanel

SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 13, 2026 · NIST NVD

    Detected

    SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.

  2. Aug 12, 2026 · NIST NVD

    Updated

    SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.

Affected

  • cpe cpanel/cpanelversion unspecified
  • cpe cpanel/whmversion unspecified
  • cpe cpanel/wp squaredversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32992

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32992

    SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.

    nvd.nist.gov

References