CVE-2026-36035

The CAXPerts UniversalPlantViewer WebServices Server v2.7.6 is affected by an incorrect access control vulnerability in the /api/License/deactivateOffline endpoint. This flaw allows authenticated attackers with low-level privileges to perform a Denial of Service (DoS) attack by removing the licen...

CVE-2026-36035: Improper Access Control

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service DoS via removing the license from the webserver...