CVE-2026-17583: Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check

Q: What is the severity of CVE-2026-17583?

The severity of CVE-2026-17583 is rated high with a score of 8.4.

Q: How do I fix CVE-2026-17583?

To fix CVE-2026-17583, ensure that integrity checks are implemented for .fsa/.hid output files to prevent unauthorized modifications.

Q: What are the consequences of CVE-2026-17583?

The consequences of CVE-2026-17583 include the potential for attackers to alter DNA data, leading to inaccurate DNA test results.

Q: What products are affected by CVE-2026-17583?

The affected products by CVE-2026-17583 are the Thermo Fisher Applied Biosystems Genetic Analyzers.

Q: What type of attack does CVE-2026-17583 support?

CVE-2026-17583 supports attacks that involve tampering with genetic data files to manipulate test outcomes.

Published Aug 5, 2026

Updated

The affected

Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.

Affected Software

9 affected components

Thermo Fisher Applied Biosystems Genetic Analyzers

Thermofisher Abi Prism 310 Data Collection Software<=3.1

Thermofisher Abi Prism 3100\/3100-avant Data Collection Software<=2.0

Thermofisher Applied Biosystems 3130 Series Data Collection Software<=4.1

Thermofisher Applied Biosystems 3500\/3500xl Series Data Collection Software<4.0.3

Thermofisher Applied Biosystems 3730\/3730xl Series Data Collection Software<5.0.3

Thermofisher Applied Biosystems Seqstudio Flex Series Instrument Software<1.2.1

Thermofisher Applied Biosystems Seqstudio Genetic Analyzer Data Collection Software<1.2.6

Thermofisher Genemapper Id-x<1.7.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Applied Biosystems 3500/3500xL Series Data Collection Software to a version that resolves this vulnerability.
Fixed in 4.0.3
Upgrade
Upgrade Applied Biosystems 3730/3730xL Series Data Collection Software to a version that resolves this vulnerability.
Fixed in 5.0.3
Upgrade
Upgrade Applied Biosystems GeneMapper ID-X Software to a version that resolves this vulnerability.
Fixed in 1.7.4
Upgrade
Upgrade Applied Biosystems SeqStudio Flex Series Instrument Software to a version that resolves this vulnerability.
Fixed in 1.2.1
Upgrade
Upgrade Applied Biosystems SeqStudio Genetic Analyzer Data Collection Software to a version that resolves this vulnerability.
Fixed in 1.2.6
Compensating control
Verify DNA output files (.fsa/.hid) have not been modified going forward; the security updates add digital signatures on the instrument software to provide integrity protection.

Event History

Aug 5, 2026

CVE Published

via MITRE·08:23 PM

Data Sourced

via MITRE·08:23 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:16 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-17583?

The severity of CVE-2026-17583 is rated high with a score of 8.4.

How do I fix CVE-2026-17583?