← All advisories

High severity7.8NVD Advisory· Published May 12, 2026· Updated Jul 21, 2026

CVE-2026-8108

CVE-2026-8108

Description

The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Fujielectric/Tellus2 versions
cpe:2.3:a:fujielectric:tellus:5.0.2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fujielectric:tellus:5.0.2.0:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

2

github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-132-01.jsonnvdThird Party Advisory
www.cisa.gov/news-events/ics-advisories/icsa-26-132-01nvdMitigationUS Government Resource

News mentions

3

ZDI-26-366: Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability
Zero Day Initiative · Jun 24, 2026
ZDI-26-367: Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability
Zero Day Initiative · Jun 24, 2026
Fuji Electric Tellus
CISA ICS Advisories