ZDI 2026-06-24

ZDI-26-366: Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability

CVE-2026-8108

Machine-generated analysis · WAYSCloud LLM

The vulnerability stems from exposed driver file APIs in Fuji Electric Tellus pcid64 that can be abused to delete arbitrary files.

Context

Fuji Electric Tellus pcid64 driver is affected by a vulnerability that exposes APIs allowing arbitrary file deletion. The issue requires an attacker to have already executed low-privileged code on the system. The ZDI assigned a CVSS score of 7.8, indicating local access and high impact on integrity. Worth noting the vulnerability is in a driver component, which may operate with elevated privileges.

Operator considerations

Check: Inventory systems running Fuji Electric Tellus with the pcid64 driver.

From Zero Day Initiative ↗

This vulnerability allows local attackers to delete arbitrary files on affected installations of Fuji Electric Tellus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-8108.

Read the full advisory on ZDI →