Thermo Fisher Torrent Suite Software
Thermo Fisher Torrent Suite through 5.18 has an authenticated path traversal fixed in version 5.22.
CISA says Thermo Fisher Torrent Suite Software versions 5.18 and earlier are vulnerable to path traversal, CVE-2026-107777. An authenticated attacker could read arbitrary files on the Torrent Server that are accessible to the web service account. The CVSS v3.1 base score is 6.5. Thermo Fisher fixed the issue in version 5.22 or later, and CISA says no known public exploitation has been reported.
- Authenticated path traversal CVE-2026-107777 can read files available to the web account.
- CVSS v3.1 base score is 6.5, and CISA knows of no public exploitation.
- Thermo Fisher recommends updating Torrent Suite Software to 5.22 or later.
- CVEs
- CVE-2026-107777
- Vendors
- Thermo Fisher
- Products
- Torrent Suite Software
- Organizations
- CISAThermo Fisher
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-107777 | Authenticated path traversal in Thermo Fisher Torrent Suite | 7.1 | — |
From the original article
2 min read at cisa.govView CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following versions of Thermo Fisher Torrent Suite Software are affected: Torrent Suite Software <=5. 18 (CVE-2026-107777) CVSS Vendor Equipment v3 6.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.