High severity7.8NVD Advisory· Published Jun 18, 2026
AzeoTech DAQFactory
CVE-2026-12390
Description
In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.
Affected products
1- Range: <=21.1
Patches
Vulnerability mechanics
News mentions
2- ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution VulnerabilityZero Day Initiative · Jul 23, 2026
- AzeoTech DAQFactory (Update A)CISA ICS Advisories