Security Advisory
CVE-2026-36035
6.5
MEDIUM
Vulnerability Description
Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service (DoS) via removing the license from the webserver.
Published Date
July 14, 2026
Official Source
NIST NVD Advisory