What is the CVSS score of EUVD-2026-30778?

EUVD-2026-30778 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of N A are affected by EUVD-2026-30778?

Thermo Fisher Scientific Torrent Suite Dx versions through 5.14.2 contain a privilege escalation vulnerability allowing authenticated laboratory staff to gain administrative control over the…

How to fix or mitigate EUVD-2026-30778?

Within 24 hours, audit all Torrent Suite Dx administrator accounts and generate access logs for the past 90 days to identify any suspicious privilege escalation attempts or administrative activity from non-administrative user accounts. Within 7 days, implement network segmentation to restrict Torrent Suite Dx access to authenticated laboratory personnel only, enforce principle-of-least-privilege by reviewing and revoking unnecessary elevated permissions, and enable comprehensive audit logging for all administrative functions. Within 30 days, establish a formal patch-monitoring process to immediately deploy any vendor-released security update once Thermo Fisher Scientific releases a fix for version 5.14.2, and consider evaluation of alternative sequencing platforms if patch timelines become protracted.

N A EUVD-2026-30778

| CVE-2026-41085 HIGH

Improper Privilege Management (CWE-269)

2026-05-18 mitre

GHSA-f4gf-fpmw-hx46

Privilege Escalation N A

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 18:06 vuln.today

CVE Published

May 18, 2026 - 00:00 cve.org

HIGH 8.8

CVE Published

May 18, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges to gain unauthorized administrator-level privileges through exploitation of specific system interfaces.

AnalysisAI

Privilege escalation in Thermo Fisher Scientific Torrent Suite Dx software (all versions through 5.14.2) allows an authenticated, limited-privilege user to gain administrator-level control by abusing specific exposed system interfaces. The flaw grants full read/write/availability impact over the sequencing-analysis platform (CVSS 8.8). No public exploit identified at time of analysis, and CISA SSVC records no observed exploitation, though the technical impact is rated total.