ZDI-CAN-27670: ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-8108.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Affected installations of Fuji Electric Tellus using the pcid64 driver are exposed. Exploitation requires an attacker to already be able to run code locally with low privileges on the target system.
Can this be exploited remotely without prior access?
The available information describes this as a local privilege-escalation vulnerability. It does not indicate that remote exploitation without local code execution is possible.
What level of access can an attacker gain?
A local attacker who can exploit the issue can escalate privileges on the affected system. The advisory assigns a CVSS score of 7.8.