CVE-2025-66596

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate request headers. When an attacker inserts an invalid host header, users could be redirected to malicious sites. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Score

CVSS 4.0 6.9 Medium

Status

Analyzed - 7168b535-132a-4efe-a076-338f829b2eb9

Published

2026-02-09

Last modified

2026-02-09

Weaknesses

CWE-601

Affected products

• Fast/tools (Yokogawa)
• Fasttools (Yokogawa Electric Corporation)

References

• https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf