CVE-2026-36035

The CAXPerts UniversalPlantViewer WebServices Server v2.7.6 is affected by an incorrect access control vulnerability in the /api/License/deactivateOffline endpoint. This flaw allows authenticated attackers with low-level privileges to perform a Denial of Service (DoS) attack by removing the licen...