CVE-2026-17583
HIGHCVSS 8.4/10
Last modified
CVE-2026-17583 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes..
Description
The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Thermo Fisher | Applied Biosystems 3500/3500xL Series Data Collection Software | <= 4.0.2 |
| Thermo Fisher | Applied Biosystems 3730/3730xL Series Data Collection Software | <= 5.0.2 |
| Thermo Fisher | Applied Biosystems SeqStudio Genetic Analyzer Data Collection Software | <= 1.2.5 |
| Thermo Fisher | Applied Biosystems SeqStudio Flex Series Instrument Software | <= 1.2.0 |
| Thermo Fisher | Applied Biosystems GeneMapper ID-X Software | <= 1.7.3 |
| Thermo Fisher | Applied Biosystems 3130 Series Data Collection Software | <= 4.1 |
| Thermo Fisher | ABI PRISM 3100/3100-Avant Data Collection Software | <= 2.0 |
| Thermo Fisher | ABI PRISM 310 Data Collection Software | <= 3.1 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-17583?
The affected
Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.
How severe is CVE-2026-17583?
CVE-2026-17583 has a CVSS score of 8.4/10 (HIGH severity).
How do I fix CVE-2026-17583?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-17577The SSL Zen plugin for WordPress is vulnerable to Reflected …6.1
- CVE-2026-17578Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do…2.3
- CVE-2026-1758Session fixation vulnerability in Secomea GateManager (webse…8.3
- CVE-2026-17580The Advanced Views – Display Custom Fields (ACF, Pods, MetaB…6.5
- CVE-2026-17581The WCPOS – Point of Sale (POS) plugin for WooCommerce plugi…7.2
- CVE-2026-17582The Slider Hero plugin for WordPress is vulnerable to second…4.9
- CVE-2026-17585The Royal Addons for Elementor – Addons and Templates Kit fo…5.3
- CVE-2026-17586The VK All in One Expansion Unit plugin for WordPress is vul…6.4
- CVE-2026-17587The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools …5.3
- CVE-2026-17589The Shopping Cart & eCommerce Store plugin for WordPress is …4.9
- CVE-2026-1759Improper handling of insufficient permissions or privileges …6.5
- CVE-2026-17590Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
Are you affected by CVE-2026-17583?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST