PT-2026-7061 · Unknown · Fast/Tools

Published 2026-02-09 · Updated 2026-03-06 · CVE-2025-66596

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions FAST/TOOLS versions R9.01 through R10.04

Description The software does not properly validate request headers. An attacker inserting an invalid host header could redirect users to malicious sites. The vulnerable component is susceptible to host header injection attacks.

Recommendations Update to a version later than R10.04.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2026-01898

CVE-2025-66596

Affected Products

Fast/Tools

References · 8

• https://web-material3.yokogawa.com/1/39206/files/YSAR-26-0001-E.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01898 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66596 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66596 · Security Note
• https://twitter.com/dailycve/status/2030068440321380780 · Twitter Post
• https://t.me/cveNotify/151358 · Telegram Post
• https://t.me/CVEtracker/44156 · Telegram Post
• https://t.me/cveNotify/154533 · Telegram Post