High severity · published Jun 23, 2026
CVE-2026-11833
Overview: A vulnerability has been found in FAST/TOOLS and CI Server
8.2
CVSS
0.3%
EPSS
No
On KEV
Description
Overview:
A vulnerability has been found in FAST/TOOLS and CI Server. The web server may return a response containing the CI Server setting information. This information could
be exploited by an attacker for other attacks.
The affected products and versions are as follows:
FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04
CI Server (All packages) R1.01 to R1.04
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
CI Server · Yokogawa Electric Corporation
R1.01 through R1.04 · source: vendor
FA
FAST/TOOLS · Yokogawa Electric Corporation
R9.01 through R10.04 · source: vendor
In the news
VulnerabilityHigh
Yokogawa FAST/TOOLS and CI Server
View CSAF
Summary
Successful exploitation of this vulnerability may return a response containing the CI Server setting information.
The following versions of Yokogawa FAST/TOOLS and CI Server are affected:
FAST/TOOLS >=R9.01|<=R10.04
Collaborative Information Server (CI Server) >=R1.01|<=R1.04
CVSS
Vendor
Equipment
Vulnerabilities
v3 7.5
Yokogawa
Yokogawa FAST/TOOLS and CI Server
Cleartext Transmission of Sensitive Information
Background
Critical Infrastructure Sectors: Critical Manufacturing, Energy, Food and Agriculture
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Japan
Vulnerabilities
Expand All +
CVE-2026-11833
The web server may return a response containing the CI Server setting information. This information could be exploited by an attacker for other attacks.
View CVE Details
Affected Products
Yokogawa FAST/TOOLS and CI Server
Vendor: Yokogawa
Product Version: Yokogawa FAST/TOOLS: >=R9.01|<=R10.04, Yokogawa Collaborative Information Server (CI Server): >=R1.01|<=R1.04
Product Status: known_affected
Remediations
Vendor fix Yokogawa recommends users update FAST/TOOLS up to R10.04 and apply patch software (R10.04 SP4).
Mitigation Yokogawa recommends users update Collaborative Information Server (CI Server) up to R1.05.
Mitigation For more information and details on implementing these mi...
Jun 25, 2026·CISA Advisories