PT-2026-40427 · Unknown · Fuji Tellus

Kim Myung-Gyu · CVE-2026-8108 · Published 2026-05-12 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fuji Electric Tellus (affected versions not specified)

Description The installation of Fuji Tellus adds a kernel driver that grants all users read and write permissions. This improper permission configuration allows for local privilege escalation from a standard user to SYSTEM level. Additionally, the pcid64 driver exposes dangerous methods within its Registry and File APIs, which can lead to arbitrary file deletion. The driver also contains an untrusted pointer dereference issue that may result in a Denial of Service (DoS), a condition where the system becomes unavailable or crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-749

Related Identifiers

CVE-2026-8108

ZDI-26-366

ZDI-26-367

ZDI-26-439

ZDI-26-440

Affected Products

Fuji Tellus

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2026-8108 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-366 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-440 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-367 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-439 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-132-01.json · Note
• https://twitter.com/CVEnew/status/2054340919613083747 · Twitter Post
• https://twitter.com/aviatrixtrc/status/2054252037982863463 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-132-01 · Note
• https://twitter.com/VulmonFeeds/status/2054366145168236809 · Twitter Post
• https://t.me/cveNotify/209207 · Telegram Post
• https://t.me/CVEtracker/53587 · Telegram Post