CVE-2025-66601
Medium · 6.1CVSS
6.1
EPSS
0.2%
Published
Feb 9, 2026
CISA due date
—
The record
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not specify MIME types. When an attacker performs a content sniffing attack, malicious scripts could be executed. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-46582 In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as… CWE-358
- CVE-2026-49783 Improperly implemented security check for standard in Windows Secure Boot allows an… CWE-358
- CVE-2026-11122 Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed… CWE-358
- CVE-2026-11127 Inappropriate implementation in WebAPKs in Google Chrome on Android prior to… CWE-358
- CVE-2026-44475 Ella Core is a 5G core designed for private networks. CWE-358
- CVE-2026-44473 Ella Core is a 5G core designed for private networks. CWE-358
- CVE-2026-44474 Ella Core is a 5G core designed for private networks. CWE-358
- CVE-2026-42082 free5GC is an open-source implementation of the 5G core network. CWE-358