CVE-2026-12921 is a Use After Free vulnerability (CWE-416) affecting AzeoTech DAQFactory versions 21.1 and earlier. An attacker can exploit this flaw by providing specially crafted .ctl files, which may lead to arbitrary code execution. The vulnerability has a high CVSS 4.0 base score of 8.4, indicating significant impact if exploited. There is no vendor advisory or patch information available at this time, and the product is not a cloud service. No known exploits in the wild have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system, potentially leading to full compromise of the DAQFactory application environment. The vulnerability requires local access (AV:L) and user interaction (UI:A) but does not require privileges or authentication. The impact on confidentiality, integrity, and availability is high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid opening untrusted or suspicious .ctl files with DAQFactory. Monitor vendor communications for updates on patches or mitigations.