{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/torrent-suite-software--5.18/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Torrent Suite Software (\u003c= 5.18)"],"_cs_severities":["high"],"_cs_tags":["path-traversal","cve-2026-107777","medical-devices","ics"],"_cs_type":"advisory","_cs_vendors":["Thermo Fisher"],"content_html":"\u003cp\u003eThermo Fisher Torrent Suite Software versions 5.18 and earlier contain a path traversal vulnerability (CVE-2026-107777) identified in the Healthcare and Public Health sector. This vulnerability stems from improper input validation, which allows an authenticated attacker to manipulate file path parameters. By submitting crafted requests, an attacker can access arbitrary files on the Torrent Server that are accessible to the web service account. Given the nature of the application, which is used in critical healthcare environments, unauthorized access to sensitive configuration, system, or medical data poses a significant security risk. The vendor has released a fix and recommends upgrading to version 5.22 or later to mitigate this issue.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker obtains valid credentials for the Torrent Suite Software application.\u003c/li\u003e\n\u003cli\u003eAttacker interacts with the web interface to identify input parameters that handle file paths.\u003c/li\u003e\n\u003cli\u003eAttacker crafts a malicious HTTP request containing path traversal sequences (e.g., ../../).\u003c/li\u003e\n\u003cli\u003eAttacker sends the crafted request to the vulnerable web endpoint.\u003c/li\u003e\n\u003cli\u003eThe application fails to sanitize the path, resolving the directory traversal.\u003c/li\u003e\n\u003cli\u003eThe web service retrieves the contents of the targeted file.\u003c/li\u003e\n\u003cli\u003eThe application returns the contents of the unauthorized file in the HTTP response.\u003c/li\u003e\n\u003cli\u003eAttacker gains access to sensitive system or application files for further reconnaissance or exfiltration.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation could result in the disclosure of sensitive files residing on the Torrent Server. This vulnerability affects Torrent Suite Software versions 5.18 and earlier globally. Impacted organizations in the healthcare sector could face exposure of clinical data, configuration files, or credentials stored on the server, potentially leading to a broader compromise of laboratory workflows or network environments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Thermo Fisher Torrent Suite Software to version 5.22 or later immediately as recommended by the vendor.\u003c/li\u003e\n\u003cli\u003eRestrict network access to the Torrent Suite Software web interface, ensuring it is not reachable from the public internet.\u003c/li\u003e\n\u003cli\u003eImplement firewall rules to isolate control system networks from general business networks.\u003c/li\u003e\n\u003cli\u003eAudit web server logs for anomalous requests containing path traversal patterns (e.g., encoded or repeated '../' sequences) directed at application endpoints.\u003c/li\u003e\n\u003cli\u003eEnforce strong authentication controls to prevent unauthorized access, as the vulnerability requires an authenticated session.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-15T17:00:14Z","date_published":"2026-10-15T17:00:14Z","id":"https://feed.craftedsignal.io/briefs/2026-10-thermo-fisher-path-traversal/","summary":"An authenticated path traversal vulnerability in Thermo Fisher Torrent Suite Software (CVE-2026-107777) allows remote attackers to read arbitrary files from the affected server.","title":"Path Traversal Vulnerability in Thermo Fisher Torrent Suite Software","url":"https://feed.craftedsignal.io/briefs/2026-10-thermo-fisher-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Torrent Suite Software (\u003c= 5.18)","version":"https://jsonfeed.org/version/1.1"}