DNA Test Software Vulnerability Allows Attackers to Alter Analysis Data

Cybersecuritynews •Guru Baran • August 3, 2026

Thermo Fisher Scientific has disclosed a high-severity security flaw affecting several of its Applied Biosystems Human Identification (HID) software products, warning that attackers could make nearly undetectable modifications to forensic DNA analysis files before they are processed. The vulnerability, tracked as CVE-2026-17583, carries a CVSS v4.0 score of 8.2 and was published on July 31, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical DNA Data Tampering Vulnerability in Thermo Fisher Software Thermo Fisher Scientific disclosed a critical vulnerability, CVE-2026-17583, in its Applied Biosystems human identification software, allowing attackers to alter DNA analysis files (.fsa and .hid) without detection. This flaw has existed since at least 1995 and poses a significant risk to forensic and clinical DNA evidence integrity. Exploitation requires access to laboratory systems and knowledge of DNA workflows. No exploitation in the wild has been reported as of August 2026, and the vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog. A patch has been released, introducing digital signatures for new files, but historical data remains vulnerable. The vulnerability was demonstrated using AI to manipulate DNA profiles, raising serious concerns about data authenticity. As of now, there are no public indicators of compromise or proof-of-concept code available. 2 sources 68

Extracted Entities

DNA Test Software Vulnerability Allows Attackers to Alter Analysis Data

The full story

Extracted Entities

Companies (1)

CVEs (1)

Platforms (1)