CVE-2026-12390

Radar advisories

• 2026-07-23 ZDI ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability Exploitation requires a victim to load a malicious CTL file via a web page or local file.
• 2026-06-18 CISA AzeoTech DAQFactory The advisory states that loading untrusted .ctl files in AzeoTech DAQFactory <=21.1 may lead to arbitrary code execution due to a type confusion…

References

• NVD ↗
• CVE.org ↗
• Zero Day Initiative ↗