Our takeCISA reports active exploitation in Thermo Fisher Torrent Suite <=5.18 (CVE-2026-107777): attackers can read arbitrary files on the server. Update now if you run it.Security Resilience desk
Sources (2)
- cisa_advisories · cisa_advisories
- auscert_bulletins · auscert_bulletins
What this means for you — Security leader:CISA reports active exploitation of a path traversal vulnerability (CVE-2026-107777, CVSS 6.5) in Thermo Fisher Torrent Suite Software <=5.18 that lets authenticated attackers read arbitrary files on the Torrent Server. If you run this in a lab or production environment, update immediately and restrict the web interface from untrusted networks.
What this means for you — Lean IT orgs:If you run Thermo Fisher Torrent Suite Software for sequencing or lab work, update it to a version newer than 5.18 right away. Most lean-IT teams should also make sure the web interface is not reachable from the internet.
What this means for you — MSP:Check client environments for any use of Thermo Fisher Torrent Suite Software <=5.18; if present, prioritize patching and confirm the application server is not internet-exposed. This is a lab/sequencing tool, so focus on healthcare, research, and diagnostic clients.
What this means for you — Researcher:CISA reports active exploitation of a path traversal vulnerability (CVE-2026-107777) in Thermo Fisher Torrent Suite <=5.18 allowing authenticated arbitrary file reads. Review your lab systems and restrict network access to the Torrent Server.