CVE-2026-32992
Published May 13, 2026SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor/product archive
cpanel / wp_squared CVEs
Beta · best-effort3 CVEs tagged to cpanel / wp_squared — 1 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2026-29205
Published May 13, 2026Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-41940
Published Apr 29, 2026cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to th…
- evidence mentions
- 33
- Buzz score
- 93.0
Showing 1-3 of 3 CVEsPage 1 of 1