CVE-2026-17583: Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check

Severity: high (CVSS 8.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-05 · updated 2026-08-26
Weakness: CWE-353

Description

The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.

Affected products

Thermofisher Abi Prism 3100/3100-Avant Data Collection Software: through 2.0
Thermofisher Abi Prism 310 Data Collection Software: through 3.1
Thermofisher Applied Biosystems 3130 Series Data Collection Software: through 4.1
Thermofisher Applied Biosystems 3500/3500Xl Series Data Collection Software: before 4.0.3 — fixed in 4.0.3
Thermofisher Applied Biosystems 3730/3730Xl Series Data Collection Software: before 5.0.3 — fixed in 5.0.3
Thermofisher Applied Biosystems Seqstudio Flex Series Instrument Software: before 1.2.1 — fixed in 1.2.1
Thermofisher Applied Biosystems Seqstudio Genetic Analyzer Data Collection Software: before 1.2.6 — fixed in 1.2.6
Thermofisher Genemapper Id-X: before 1.7.4 — fixed in 1.7.4

How to fix

Upgrade to a fixed version: Thermofisher Applied Biosystems 3500/3500Xl Series Data Collection Software 4.0.3; Thermofisher Applied Biosystems 3730/3730Xl Series Data Collection Software 5.0.3; Thermofisher Applied Biosystems Seqstudio Flex Series Instrument Software 1.2.1; Thermofisher Applied Biosystems Seqstudio Genetic Analyzer Data Collection Software 1.2.6; Thermofisher Genemapper Id-X 1.7.4. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-17583 or the next vulnerability affects your stack