Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

Thermo Fisher Scientific has patched a critical vulnerability in its Applied Biosystems human identification software that could allow attackers to tamper with DNA analysis files without detection. The flaw, tracked as CVE-2026-17583, allows for nearly undetectable modifications to data files, potentially compromising forensic evidence. While no exploitation has been reported, the vulnerability has existed since 1995 and could be used to alter historical casework. Thermo Fisher recommends implementing specific controls to mitigate the risk for customers unable to apply updates.