First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-66598

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product supports old SSL/TLS versions, potentially allowing an attacker to decrypt communications with the web server.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Yokogawa Electric Corporation	FAST/TOOLS	>= R9.01, <= R10.04

References

https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdfVendor Advisory

Timeline

Published: Feb 9, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-665996.9A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Physical paths could be displayed on web pages. T CVE-2025-66607.8PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attacke CVE-2025-666008.8A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product lacks HSTS (HTTP Strict Transport Se CVE-2025-666016.1A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify MIME types. When an CVE-2025-666029.8A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. When CVE-2025-666039.8A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An att CVE-2025-666045.3A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be displayed on the web CVE-2025-666055.3A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage with CVE-2025-666069.6A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An at CVE-2025-666075.3A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains an insecure setting.CVE-2025-666087.5A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An CVE-2025-66617.8PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi

CVE-2025-66598: High severity, CVSS 7.5 | Vulnix