INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Thermo Fisher Patches Forensic DNA File Tampering Vulnerability in Software

| 2026-08-04 11:34 HIGH HIGH VULNERABILITY DISCLOSURE
JSON
Executive Summary
AI-generated
Thermo Fisher Scientific has released security updates for several Applied Biosystems human identification products after researchers identified a vulnerability that could allow nearly undetectable changes to forensic DNA data files. The issue, tracked as CVE-2026-17583, carries a CVSS score of 8.2 out of 10 (CVSS 4.0). This vulnerability specifically impacts .fsa and .hid output files generated by human-identification software, which are used during human identification analysis, potentially affecting the reliability of forensic results. The attack works by exploiting laboratory controls to be bypassed, allowing these files to be altered after generation but before they are loaded into analysis software. As a result, 3500/3500xL Series Data Collection and 3730/3730xL Series Data Collection versions earlier than 4.0.3 and 5.0.3 respectively need to be updated; SeqStudio Genetic Analyzer Data Collection versions earlier than 1.2.6 also require an update, while GeneMapper ID-X needs updates from v1.7.3 onwards.
Technical Mitigations AI-generated
• Apply digital signatures to .fsa and .hid output files generated by human-identification software, as added in updates for 3500/3500xL Series Data Collection (Version 4.0.3) and SeqStudio Genetic Analyzer Data Collection (Version 1.2.6). • Use CVSS v4.0 scoring to evaluate the severity of potential exploitation. • Monitor for .fsa and .hid output files that have been altered after generation but before they are loaded into analysis software, as a technique to detect tampering attempts. • Block or hunt for unauthorized access to laboratory controls, as an indicator to prevent circumvention of security measures.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
CVE-2026-17583CVE-2026-17583
Target & Sectors
Global Scope
Incident Timeline
‎2026/08/04
Thermo Fisher released updates for five Applied Biosystems human identification product lines to address the identified forensic DNA file tampering flaw, tracked as CVE-2026-17583.
infrastructure 4.0.2
Version 4.0.2 and earlier need to be updated to version 4.0.3.
…e updates cover five Applied Biosystems human identification product lines: 3500/3500xL Series Data Collection Software 4.0.2 and earlier, fixed in 4.0.3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudi…
infrastructure 4.0.3
Version 4.0.2 and earlier need to be updated to version 4.0.3.
…Biosystems human identification product lines: 3500/3500xL Series Data Collection Software 4.0.2 and earlier, fixed in 4.0.3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Coll…
infrastructure 5.0.2
3730/3730xL Series Data Collection: Version 5.0.2 and earlier need to be updated to version 5.0.3.
…3500/3500xL Series Data Collection Software 4.0.2 and earlier, fixed in 4.0.3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6…
infrastructure 5.0.3
3730/3730xL Series Data Collection: Version 5.0.2 and earlier need to be updated to version 5.0.3.
…ection Software 4.0.2 and earlier, fixed in 4.0.3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instru…
infrastructure 1.2.5
SeqStudio Genetic Analyzer Data Collection: Versions 1.2.5 and earlier need to be updated to version 1.2.6.
…3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instrument Software 1.2.0 and earlier, fixed in 1.2.1.
infrastructure 1.2.6
SeqStudio Genetic Analyzer Data Collection: Versions 1.2.5 and earlier need to be updated to version 1.2.6.
…3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instrument Software 1.2.0 and earlier, fixed in 1.2.1.
infrastructure 1.2.0
…3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instrument Software 1.2.0 and earlier, fixed in 1.2.1.
SeqStudio Flex Series Instrument: Versions 1.2.0 and earlier need to be updated to version 1.2.1.
infrastructure 1.2.1
…3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instrument Software 1.2.0 and earlier, fixed in 1.2.1.
SeqStudio Flex Series Instrument: Versions 1.2.0 and earlier need to be updated to version 1.2.1.
infrastructure 7.3
GeneMapper ID-X: Versions v1.7.3 and earlier need to be updated to version v1.7.4.
…ic signature (SAE) enabled must first install the latest SAE profile on the SAE Admin Console GeneMapper ID-X Software v1.7.3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, AB…
infrastructure 7.4
GeneMapper ID-X: Versions v1.7.3 and earlier need to be updated to version v1.7.4.
…st first install the latest SAE profile on the SAE Admin Console GeneMapper ID-X Software v1.7.3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, ABI PRISM 3100/3100-Avant Data…
infrastructure 4.1
These unsupported programs include the 3130 Series Data Collection version 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection version 2.0 and earlier, and ABI PRISM 310 Data Collection version 3.1 and earlier.
…r ID-X Software v1.7.3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection Software 2.0 and earlier, and ABI PRISM 310 Data Collection Softw…
infrastructure 2.0
These unsupported programs include the 3130 Series Data Collection version 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection version 2.0 and earlier, and ABI PRISM 310 Data Collection version 3.1 and earlier.
….3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection Software 2.0 and earlier, and ABI PRISM 310 Data Collection Software 3.1 and earlier.
infrastructure 3.1
These unsupported programs include the 3130 Series Data Collection version 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection version 2.0 and earlier, and ABI PRISM 310 Data Collection version 3.1 and earlier.
….3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection Software 2.0 and earlier, and ABI PRISM 310 Data Collection Software 3.1 and earlier.
Tactical Metrics
Metrics
infrastructure
‎4.0.2
Software Version
Version 4.0.2 and earlier need to be updated to version 4.0.3.
…e updates cover five Applied Biosystems human identification product lines: 3500/3500xL Series Data Collection Software 4.0.2 and earlier, fixed in 4.0.3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudi…
Metrics
infrastructure
‎4.0.3
Software Version
Version 4.0.2 and earlier need to be updated to version 4.0.3.
…Biosystems human identification product lines: 3500/3500xL Series Data Collection Software 4.0.2 and earlier, fixed in 4.0.3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Coll…
Metrics
infrastructure
‎5.0.2
Software Version
3730/3730xL Series Data Collection: Version 5.0.2 and earlier need to be updated to version 5.0.3.
…3500/3500xL Series Data Collection Software 4.0.2 and earlier, fixed in 4.0.3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6…
Metrics
infrastructure
‎5.0.3
Software Version
3730/3730xL Series Data Collection: Version 5.0.2 and earlier need to be updated to version 5.0.3.
…ection Software 4.0.2 and earlier, fixed in 4.0.3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instru…
Metrics
infrastructure
‎1.2.5
Software Version
SeqStudio Genetic Analyzer Data Collection: Versions 1.2.5 and earlier need to be updated to version 1.2.6.
…3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instrument Software 1.2.0 and earlier, fixed in 1.2.1.
Metrics
infrastructure
‎1.2.6
Software Version
SeqStudio Genetic Analyzer Data Collection: Versions 1.2.5 and earlier need to be updated to version 1.2.6.
…3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instrument Software 1.2.0 and earlier, fixed in 1.2.1.
Metrics
infrastructure
‎1.2.0
Software Version
SeqStudio Flex Series Instrument: Versions 1.2.0 and earlier need to be updated to version 1.2.1.
…3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instrument Software 1.2.0 and earlier, fixed in 1.2.1.
Metrics
infrastructure
‎1.2.1
Software Version
SeqStudio Flex Series Instrument: Versions 1.2.0 and earlier need to be updated to version 1.2.1.
…3 3730/3730xL Series Data Collection Software 5.0.2 and earlier, fixed in 5.0.3 SeqStudio Genetic Analyzer Data Collection Software 1.2.5 and earlier, fixed in 1.2.6 SeqStudio Flex Series Instrument Software 1.2.0 and earlier, fixed in 1.2.1.
Metrics
infrastructure
‎7.3
Software Version
GeneMapper ID-X: Versions v1.7.3 and earlier need to be updated to version v1.7.4.
…ic signature (SAE) enabled must first install the latest SAE profile on the SAE Admin Console GeneMapper ID-X Software v1.7.3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, AB…
Metrics
infrastructure
‎7.4
Software Version
GeneMapper ID-X: Versions v1.7.3 and earlier need to be updated to version v1.7.4.
…st first install the latest SAE profile on the SAE Admin Console GeneMapper ID-X Software v1.7.3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, ABI PRISM 3100/3100-Avant Data…
Metrics
infrastructure
‎4.1
Software Version
These unsupported programs include the 3130 Series Data Collection version 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection version 2.0 and earlier, and ABI PRISM 310 Data Collection version 3.1 and earlier.
…r ID-X Software v1.7.3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection Software 2.0 and earlier, and ABI PRISM 310 Data Collection Softw…
Metrics
infrastructure
‎2.0
Software Version
These unsupported programs include the 3130 Series Data Collection version 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection version 2.0 and earlier, and ABI PRISM 310 Data Collection version 3.1 and earlier.
….3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection Software 2.0 and earlier, and ABI PRISM 310 Data Collection Software 3.1 and earlier.
Metrics
infrastructure
‎3.1
Software Version
These unsupported programs include the 3130 Series Data Collection version 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection version 2.0 and earlier, and ABI PRISM 310 Data Collection version 3.1 and earlier.
….3 and earlier, fixed in v1.7.4 Three older lines get nothing: 3130 Series Data Collection Software 4.1 and earlier, ABI PRISM 3100/3100-Avant Data Collection Software 2.0 and earlier, and ABI PRISM 310 Data Collection Software 3.1 and earlier.
Intelligence Sources
HackRead 2026-08-04
The Hacker News 2026-08-03