HIGH CWE-843
CVE-2026-12390
Access of resource using incompatible type ('type confusion') in AzeoTech DAQFactory
AzeoTech·DAQFactory
8.4/ 10
CVSS 4.0
High severity
0.19%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 8% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jun 18, 2026
- Updated
- Jun 18, 2026
- First covered
- Jun 29, 2026
- Latest story
- 5 months ago
Summary
In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.
CWE-843Access of resource using incompatible type ('type confusion')
Attack profile
Attack vectorLocal
ComplexityLow
RequirementsNone
PrivilegesNone
User interactionActive
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NAffected products
- AzeoTech DAQFactoryup to 21.1