{"id":"CVE-2026-17583","aliases":["EUVD-2026-53616","GHSA-5p87-q7f6-jf7x","UBUNTU-CVE-2026-17583"],"status":"published","title":"Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check","description":"The affected\n\nThermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.","severity":{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00141,"percentile":0.03433,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-353"],"published":"2026-08-05T20:23:32Z","modified":"2026-10-17T12:58:06Z","exploits":[{"source":"pocgithub","id":"HORKimhab/CVE-2026-17583","title":"HORKimhab/CVE-2026-17583","date":"2026-08-03","url":"https://github.com/HORKimhab/CVE-2026-17583"}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"genetic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1.1b-11build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"genetic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1.1b-11build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"genetic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1.1b+git20170527.98255cb-2","0.1.1b+git20170527.98255cb-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"genetic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1.1b+git20170527.98255cb-4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"genetic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1.1b+git20170527.98255cb-5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"genetic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.1.1b+git20170527.98255cb-4","0.1.1b+git20170527.98255cb-4build1","0.1.1b+git20170527.98255cb-5"]}],"products":[{"vendor":"thermo fisher","product":"abi prism 310 data collection software"},{"vendor":"thermo fisher","product":"abi prism 3100/3100-avant data collection software"},{"vendor":"thermo fisher","product":"applied biosystems 3130 series data collection software"},{"vendor":"thermo fisher","product":"applied biosystems 3500/3500xl series data collection software"},{"vendor":"thermo fisher","product":"applied biosystems 3730/3730xl series data collection software"},{"vendor":"thermo fisher","product":"applied biosystems genemapper id-x software"},{"vendor":"thermo fisher","product":"applied biosystems seqstudio flex series instrument software"},{"vendor":"thermo fisher","product":"applied biosystems seqstudio genetic analyzer data collection software"},{"vendor":"thermofisher","product":"abi_prism_3100\\/3100-avant_data_collection_software"},{"vendor":"thermofisher","product":"abi_prism_310_data_collection_software"},{"vendor":"thermofisher","product":"applied_biosystems_3130_series_data_collection_software"},{"vendor":"thermofisher","product":"applied_biosystems_3500\\/3500xl_series_data_collection_software"},{"vendor":"thermofisher","product":"applied_biosystems_3730\\/3730xl_series_data_collection_software"},{"vendor":"thermofisher","product":"applied_biosystems_seqstudio_flex_series_instrument_software"},{"vendor":"thermofisher","product":"applied_biosystems_seqstudio_genetic_analyzer_data_collection_software"},{"vendor":"thermofisher","product":"genemapper_id-x"}],"references":[{"url":"https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/fsa_hid_bulletin.pdf","tags":["Patch","Vendor Advisory","report"]},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-216-01","tags":["Patch","Third Party Advisory","US Government Resource","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-17583","tags":["Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17583"},{"url":"https://github.com/advisories/GHSA-5p87-q7f6-jf7x"},{"url":"https://ubuntu.com/security/CVE-2026-17583","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-17583","title":"Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check","description":"The affected\n\nThermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.","status":"published","published":"2026-08-05T20:23:32.89Z","modified":"2026-08-06T13:34:57.24Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T14:19:54.84674Z"}],"euvd":[{"id":"EUVD-2026-53616","description":"The affected\n\nThermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.","status":"published","published":"2026-08-05T20:23:32Z","modified":"2026-08-06T13:34:57Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N","level":"high"}],"updated_at":"2026-11-02T18:02:09.043832Z"}],"ghsa":[{"id":"GHSA-5p87-q7f6-jf7x","title":"The affected\n\nThermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid...","description":"The affected\n\nThermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.","status":"published","published":"2026-08-05T21:31:39Z","modified":"2026-08-05T21:31:46Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T15:10:07.926015Z"}],"nvd":[{"id":"CVE-2026-17583","description":"The affected\n\nThermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.","status":"published","published":"2026-08-05T21:16:57.393Z","modified":"2026-08-26T14:50:43.4Z","cvss":[{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-353"],"updated_at":"2026-11-02T14:12:35.031043Z"}],"osv":[{"id":"UBUNTU-CVE-2026-17583","description":"The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.","status":"published","published":"2026-08-05T21:16:00Z","modified":"2026-10-17T12:58:06.588833204Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":8.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N","level":"high"}],"updated_at":"2026-11-02T16:56:01.334185Z"}]}}