Vulnerability in Thermo Fisher Genetic Analyzers Allows File Tampering
CVE-2026-17583

8.3HIGH

Key Information:

Vendor: Thermo Fisher
Status: Applied BiOSystems 3500/3500xl Series Data Collection Software; Applied BiOSystems 3730/3730xl Series Data Collection Software; Applied BiOSystems Seqstudio Genetic Analyzer Data Collection Software; Applied BiOSystems Seqstudio Flex Series Instrument Software
Vendor: CVE Published:; 5 August 2026

🔔 Create Thermo Fisher Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC📰 News Worthy

What is CVE-2026-17583?

CVE-2026-17583 is a serious vulnerability affecting the Thermo Fisher Applied Biosystems Genetic Analyzers. These devices are used primarily for DNA analysis and genetic testing, which are crucial in various fields such as healthcare, forensic science, and biological research. The vulnerability arises from the ability to tamper with .fsa/.hid output files generated by the analyzers. Attackers could exploit this flaw to modify these files, potentially altering critical DNA data and leading to inaccurate test results. Such manipulation could have dire consequences, including misdiagnoses, wrongful legal conclusions, or misguided research results, ultimately jeopardizing patient safety and trust in genetic testing processes.

Potential impact of CVE-2026-17583

Inaccurate Test Results: The primary concern with this vulnerability is the risk of generating incorrect DNA analysis outcomes. This can lead to false positives or negatives in genetic testing, adversely affecting clinical decisions and patient health.
Legal and Ethical Implications: Tampering with genetic data can have severe legal ramifications. Misleading results could result in wrongful legal actions, particularly in forensic cases or paternity tests, where accurate DNA analysis is critical.
Loss of Trust and Reputational Damage: Organizations relying on accurate genetic testing may face a significant erosion of trust from patients, professionals, and regulatory bodies. This concern can lead to reputational harm and possible regulatory scrutiny, impacting business operations and stakeholder relationships.

Affected Version(s)

ABI PRISM 310 Data Collection Software 0 <= 3.1

ABI PRISM 3100/3100-Avant Data Collection Software 0 <= 2.0

Applied Biosystems 3130 Series Data Collection Software 0 <= 4.1

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-17583
Created by HORKimhab

News Articles

Hackread

CVE-2026-17583

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files.

2 days ago