CVE-2026-12390

Access of resource using incompatible type ('type confusion') in AzeoTech DAQFactory PUBLISHED

Description (CNA)

In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.

Affected (CNA)

Vendor / product	Versions
AzeoTech / DAQFactory	affected 0 through 21.1

CWE

CWE-843

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.