What is the CVSS score of CVE-2026-8108?

CVE-2026-8108 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Fuji Tellus are affected by CVE-2026-8108?

Fuji Electric TELLUS 5.0.2 contains a local privilege escalation vulnerability (CVSS 7.8) in its kernel-mode driver that allows any low-privileged user with local system access to read or corrupt…

How to fix or mitigate CVE-2026-8108?

Within 24 hours: inventory all Fuji Electric TELLUS 5.0.2 installations and document current local user access and privilege assignments. Within 7 days: implement OS-level access controls to minimize low-privileged user accounts with system logon rights, and apply any interim mitigations provided by Fuji Electric. Within 30 days: engage Fuji Electric support to track patch release status, maintain monitoring of CISA and vendor advisories, and evaluate upgrade timelines if a patched version is released.

Fuji Tellus CVE-2026-8108

EUVD-2026-29887 HIGH

Exposed Dangerous Method or Function (CWE-749)

2026-05-12 icscert

GHSA-cvpr-rm84-x4hj

Information Disclosure Tellus

7.8

CVSS 3.1 · Vendor: icscert

Severity by source

Vendor (icscert) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local authenticated user (PR:L, AV:L) abuses a world-writable kernel driver with low complexity to gain kernel read/write, yielding total confidentiality, integrity, and availability impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 19:05 vuln.today

CVE Published

May 12, 2026 - 22:29 nvd

HIGH 7.8

DescriptionCVE.org

The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions.

AnalysisAI

Local privilege escalation in Fuji Electric TELLUS 5.0.2 arises because its installer registers a kernel-mode driver with permissions that grant read and write access to all users. A low-privileged local user can therefore interact with a privileged driver interface to read or corrupt kernel-controlled data, undermining the confidentiality, integrity, and availability of the host. No public exploit identified at time of analysis, and CISA SSVC currently marks exploitation status as none.

Technical ContextAI

TELLUS is Fuji Electric's HMI/SCADA runtime and configuration software used with their programmable operator interface panels in operational-technology (OT) environments, identified here by cpe:2.3:a:fuji_electric:tellus. The flaw sits in a device driver installed into the Windows kernel whose object/access-control permissions are set to allow any authenticated user read and write access. This maps to CWE-749 (Exposed Dangerous Method or Function): a privileged driver exposes an interface to unprivileged callers without adequate access restriction, so operations intended only for SYSTEM/administrators become reachable by ordinary users. Because the driver runs in ring 0, misuse of its exposed functionality translates directly into kernel-level read/write primitives.

RemediationAI

Consult CISA ICS advisory ICSA-26-132-01 (https://www.cisa.gov/news-events/ics-advisories/icsa-26-132-01) for the vendor-supplied fixed version and apply the Fuji Electric update as the primary remediation; a specific patched version is not stated in the provided data, so treat patch status as available per advisory rather than a confirmed version number. Where an update cannot be applied immediately, the actionable compensating control is to tighten the driver object's access-control list so that read/write is restricted to SYSTEM and Administrators (removing the Everyone/Users grant) - this directly closes the exposed interface, though it may break TELLUS functionality that legitimately relies on the driver and should be validated in a test environment. Additionally, restrict interactive and local logon rights on HMI/engineering hosts to trusted operators only, since exploitation requires local access. Verify against NVD (https://nvd.nist.gov/vuln/detail/CVE-2026-8108) and VulDB (https://vuldb.com/vuln/363482) as they are updated.