CVE-2025-66596CWE-601

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation

Medium · published February 9, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product does not

properly validate request headers. When an attacker inserts an invalid host

header, users could be redirected to malicious sites.

The

affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to

R10.04

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-02-09T03:35Z
EPSS history
Timeline
  • 09 FEB 03:35Z
    A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation
    cvelistv5