CVE-2026-17583
Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check
The affected
Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check
The affected
Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
- Record
CVE-2026-17583- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N - CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-353
- Updated
- 2026-11-02
EUVDEUVD-2026-53616
The affected
Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
- Record
EUVD-2026-53616- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-5p87-q7f6-jf7x
The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid...
The affected
Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
- Record
GHSA-5p87-q7f6-jf7x- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-353
- Updated
- 2026-11-02
NVD
The affected
Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
- Record
CVE-2026-17583- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-353
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-17583
The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
- Record
UBUNTU-CVE-2026-17583- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N - CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
- thermo fisher abi prism 310 data collection software
- thermo fisher abi prism 3100/3100-avant data collection software
- thermo fisher applied biosystems 3130 series data collection software
- thermo fisher applied biosystems 3500/3500xl series data collection software
- thermo fisher applied biosystems 3730/3730xl series data collection software
- thermo fisher applied biosystems genemapper id-x software
- thermo fisher applied biosystems seqstudio flex series instrument software
- thermo fisher applied biosystems seqstudio genetic analyzer data collection software
- thermofisher abi prism 3100\/3100-avant data collection software
- thermofisher abi prism 310 data collection software
- thermofisher applied biosystems 3130 series data collection software
- thermofisher applied biosystems 3500\/3500xl series data collection software
Affected packages
| Package | Affected | Fixed |
|---|---|---|
geneticUbuntu:16.04:LTS |
All versions, plus listed versions 0.1.1b-11build1 |
None known |
geneticUbuntu:18.04:LTS |
All versions, plus listed versions 0.1.1b-11build1 |
None known |
geneticUbuntu:22.04:LTS |
All versions, plus listed versions 0.1.1b+git20170527.98255cb-20.1.1b+git20170527.98255cb-3 |
None known |
geneticUbuntu:24.04:LTS |
All versions, plus listed versions 0.1.1b+git20170527.98255cb-4 |
None known |
geneticUbuntu:26.10 |
All versions, plus listed versions 0.1.1b+git20170527.98255cb-5 |
None known |
geneticUbuntu:26.04:LTS |
All versions, plus listed versions 0.1.1b+git20170527.98255cb-40.1.1b+git20170527.98255cb-4build10.1.1b+git20170527.98255cb-5 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | HORKimhab/CVE-2026-17583 | 2026-08-03 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-17583 is a high vulnerability (CVSS 8.3) in Thermo Fisher Abi Prism 310 Data Collection Software, published August 5, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. No source names a fixed version.