CVE-2026-12390

Summary

In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.

Affected Software

VendorProductVersion RangeStatus
AzeoTechDAQFactory0 <= 21.1affected

Weaknesses

  • CWE-843: CWE-843 Access of resource using incompatible type ('type confusion')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References