What’s Vulnerable › Vulnerabilities

CVE-2026-107777: Thermo Fisher Torrent Suite Software Path Traversal

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-16 · updated 2026-10-16
• Weakness: CWE-22

Description

Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account.

Affected products

• Thermo Fisher Torrent Suite Software: through 5.18

References

• https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-01.json
• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-01

Get alerted when CVE-2026-107777 or the next vulnerability affects your stack