Exploitation observed; activity peaked at 3 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in code execution.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-18 | 3 | Disclosure3 |
| 2026-06-19 | 1 | Active Exploitation1 |
CVE-2026-12390 In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in … https://www.cve.org/CVERecord?id=CVE-2026-12390
Post summary
A type‑confusion vulnerability (CVE‑2026‑12390) in AzeoTech DAQFactory 21.1 and earlier can be triggered by specially crafted .ctl files, as noted in the CVE record.
CVE-2026-12390: AzeoTech DAQFactory (<=21.1) lets a crafted .ctl file run arbitrary code via type confusion. CVSS 8.4. The only "fix" CISA lists is mitigations, no patch. Be honest: how many ICS shops actually password-protect their .ctl docs?
Post summary
The post announces CVE‑2026‑12390 in AzeoTech DAQFactory, a type‑confusion flaw allowing arbitrary code execution via crafted .ctl files, with a CVSS score of 8.4, and notes that only mitigations are provided by CISA, with no patch available.
Attackers are exploiting CVE-2026-12390 in AzeoTech DAQFactory through malicious .ctl files to achieve arbitrary code execution. TRC analysis shows subsequent lateral movement across industrial networks highlights the need for runtime segmentation to contain post-compromise activity. #ZeroTrust 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/icsa-26-169-02-cve-2026-12390
Post summary
The tweet reports real‑world exploitation of CVE‑2026‑12390 in AzeoTech DAQFactory through malicious .ctl files that allows arbitrary code execution and lateral movement, underscoring the need for runtime segmentation.
🚨*CVE* CVE-2026-12390 In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker using specially crafted .ctl files which can result in … https://www.cve.org/CVERecord?id=CVE-2026-12390 ----- Traducción: CVE-2026-12390 En … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑12390, a Type Confusion flaw in AzeoTech DAQFactory 21.1 and earlier, exploitable via crafted .ctl files, but provides no PoC, exploit, or patch info.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | azeotech | daqfactory | - | - | - |