CVE-2025-66601

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product does not specify MIME types. When an attacker performs a content sniffing attack, malicious scripts could be executed.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-358

Affected software

VendorProductVersions
Yokogawa Electric CorporationFAST/TOOLS>= R9.01, <= R10.04

References

Timeline

Published
Feb 9, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-666029.8A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. WhenCVE-2025-666039.8A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attCVE-2025-666045.3A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be displayed on the webCVE-2025-666055.3A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage withCVE-2025-666069.6A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An atCVE-2025-666075.3A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The response header contains an insecure setting.CVE-2025-666087.5A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An CVE-2025-66617.8PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbiCVE-2025-666149.1Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, CVE-2025-666177.1An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker coCVE-2025-66623.3PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to dCVE-2025-666207.2An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories. An attacker with admin
CVE-2025-66601: Medium severity, CVSS 6.1 | Vulnix