CVE-2025-66596 - A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation

Back Back to CVE browser

MEDIUM

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation

Published Feb 9, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.16%

Description

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product does not properly validate request headers. When an attacker inserts an invalid host header, users could be redirected to malicious sites.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Affected products

Vendor Yokogawa Electric Corporation Product Fast/tools Default
n/a
- Version
  R9.01
  Status
  affected
  Constraints
  <=R10.04

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Yokogawa Electric Corporation

Fast/tools

n/a

Version	Status	Constraints
R9.01	affected	<=R10.04

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (1)

https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf
Vendor Advisory

Link	Providers	Tags
https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner YokogawaGroup

Published Feb 9, 2026

Updated Feb 9, 2026

Reserved Dec 5, 2025

Link CVE-2025-66596

CISA Vulnrichment

Updated Feb 9, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-66596

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-66596