ZDI-CAN-27671: ZDI-26-367: Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-8108.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Prevent exploitation by denying attackers the prerequisite ability to execute low-privileged code locally: implement application whitelisting to allow only approved binaries, enforce least-privilege for user accounts (remove local administrator rights where not required), and restrict local software installation and execution via endpoint controls and policy (for example AppLocker/EDR/MDM and Group Policy) so untrusted or unauthorized code cannot run.
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems with the Fuji Electric Tellus pcid64 Driver installed are affected. Exploitation requires an attacker to already be able to run low-privileged code locally on the target system.
Can this be exploited remotely without access to the system?
The available information describes this as a local privilege-escalation vulnerability. It requires local low-privileged code execution before an attacker can exploit it.