Skip to content
OpenAdvisories
High ICSA-26-169-02 2 CVEs

AzeoTech DAQFactory (Update A)

Published Jun 18, 2026 · Updated Jun 25, 2026 · Revision 2

Vendor: AzeoTech Product: DAQFactory

Summary

Successful exploitation of these vulnerabilities could allow an attacker to upload malicious .ctl files that may lead to arbitrary code execution.

Vulnerabilities 2

  • High 8.4
    CVE-2026-12390

    Access of resource using incompatible type ('type confusion') in AzeoTech DAQFactory

    In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.

    AzeoTech DAQFactory
  • High 8.4
    CVE-2026-12921

    Use after free in AzeoTech DAQFactory

    In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.

    AzeoTech DAQFactory

Revision history

  1. #2

    Update A - Adding additional CVE and updating wording

  2. #1

    Initial Publication

References