Description
SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
References (1)
Core 1
Scores
CVSS v3
8.2
EPSS
0.0025
EPSS Percentile
16.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-295
Status
published
Products (6)
WebPros/cPanel
11.126.0.0 - 11.126.0.59
WebPros/cPanel
11.130.0.0 - 11.130.0.23
WebPros/cPanel
11.132.0.0 - 11.132.0.32
WebPros/cPanel
11.134.0.0 - 11.134.0.26
WebPros/cPanel
11.136.0.0 - 11.136.0.10
WebPros/WP Squared
11.126.1.0 - 11.136.1.12
Published
May 13, 2026
Tracked Since
May 14, 2026