CVE-2026-11833 is a vulnerability in Yokogawa Electric Corporation's FAST/TOOLS and CI Server products where the web server may disclose CI Server configuration information in its responses. This cleartext transmission of sensitive data (CWE-319) can be leveraged by attackers to conduct additional attacks. The affected FAST/TOOLS packages include RVSVRN, UNSVRN, HMIWEB, FTEES, and HMIMOB versions R9.01 through R10.04, while all CI Server packages from R1.01 through R1.04 are impacted. The vulnerability has a CVSS 4.0 score of 8.2, indicating high severity. No official remediation or patch information is currently available.

The vulnerability allows sensitive CI Server configuration information to be transmitted in cleartext via the web server response. This exposure could enable attackers to gain insights useful for further attacks against the affected systems. There is no indication of direct system compromise solely from this vulnerability, but the information disclosure increases the attack surface and risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Yokogawa Electric Corporation's advisories for updates. Until a patch is available, limit exposure by restricting access to the affected web servers and consider network-level controls to prevent unauthorized interception of traffic.