PT-2026-7056 · Unknown · Fast/Tools

Published 2026-02-09 · Updated 2026-03-06 · CVE-2025-66608

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions FAST/TOOLS versions R9.01 through R10.04

Description The software does not properly validate URLs, potentially allowing an attacker to steal files from the web server by sending specially crafted requests.

Recommendations Update to a version later than R10.04.

Fix

Weakness Enumeration

CWE-29

Related Identifiers

BDU:2026-01852

CVE-2025-66608

Affected Products

Fast/Tools

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-66608 · Security Note
• https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-66608 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01852 · Security Note
• https://twitter.com/dailycve/status/2030068881432133960 · Twitter Post
• https://t.me/CVEtracker/44169 · Telegram Post
• https://t.me/cveNotify/154530 · Telegram Post