ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-8108.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Affected Fuji Electric Tellus installations using the pcid64 driver are exposed. Exploitation requires an attacker to already be able to run low-privileged code on the target system.
Can this be exploited remotely without prior access?
The available information describes this as a local privilege escalation issue. It requires local low-privileged code execution first, so no remote unauthenticated exploitation path is stated.
What level of access could an attacker gain?
A successful attacker could escalate privileges on the affected system. The advisory assigns the issue CVSS 7.8 and tracks it as CVE-2026-8108.