Security Advisory

CVE-2026-36035

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-14 00:00:00

Last updated 2026-07-15 14:12:29

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service (DoS) via removing the license from the webserver.

← Browse all CVEs View on cve.org ↗