CVE-2020-26101
In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549).
Affects 1 product across 1 vendor.
Software does not prove or insufficiently proves that the user is who they claim to be.
Show all 10
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
cPanel versions prior to 88.0.3 use insecure RNDC credentials for BIND on templated VMs, which could allow unauthorized access to DNS management.
BSID: BS-2020-GLOBAL-149266-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2020-26101?
What is the CVSS score for CVE-2020-26101?
Is CVE-2020-26101 actively exploited?
How do I remediate CVE-2020-26101?
What systems are affected by CVE-2020-26101?
| CVE ID | CVE-2020-26101 |
|---|---|
| BSID | BS-2020-GLOBAL-149266-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2020-09-25 |
| Last Modified | 2024-11-21 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549).
Source: NIST NVD / MITRE CVE Database
An attacker with network access to the affected cPanel server could exploit this vulnerability to gain unauthorized control over the BIND DNS server by using the insecure RNDC credentials.
Exploitation Likelihood: HIGH
| Vendor | Product | Fixed Version |
|---|---|---|
| Cpanel | Cpanel | — |
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
SAGE Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | dfbea804ff8ceca9b9d55130524cc2f7493f08500b592493dba6c6be227c595446cc0ff2e37f26ccf9eaeeae98097750282e6c485fb582e8d15301d32a95fea1 |
Critical Severity - Know Your Exposure
A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Check Your Assets Free →