Home / Vulnerability Intelligence / CVE-2026-32992

CVE-2026-32992 - Vulnerability Analysis

HighCVSS: 8.2

Last Updated: May 14, 2026

DNS Cluster - Man-in-the-Middle

Published: May 13, 2026Updated: May 14, 2026Remote Exploitable

Overview

DNS Cluster system contains a man-in-the-middle vulnerability caused by disabled SSL verification, letting attackers intercept and capture credentials, exploit requires SSL verification to be disabled.

Severity & Score

Severity: High

CVSS Score: 8.2

EPSS Score: 2.6%(Probability of exploitation in next 30 days)

Impact

Attackers can intercept and capture credentials, leading to credential theft and potential further compromise.

Mitigation

Enable SSL verification or update to a version that enforces SSL verification.

References

https://support.cpanel.net/hc/en-us/articles/40437241987607-Security-CVE-2026-32992-cPanel-WHM-WP2-Security-Update-May-13-2026

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

May 14, 2026

🟠 CVE-2026-32992 - High (8.2) SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32992/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

May 14, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-32992
Severity: High
CVSS Score: 8.2
Type: man_in_the_middle
Status: unconfirmed
EPSS: 2.6%
Social Posts: 2

CWE

CWE-295

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS Score

2.6%Probability of exploitation in the next 30 days