CVE Catalog
CVE-2026-12390
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.15%
4th percentile - higher than 4% of all known CVEs
Summary
In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.
Risk Assessment
The risk for the organization is the potential for remote code execution by an attacker, which could lead to control system takeover and disruption of industrial processes.
Recommendation
It is recommended to immediately update DAQFactory to the latest version and restrict access to .ctl files to trusted sources only.
Original NVD description (English source)
In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.