CVE-2026-44108
Received Received - Intake

Firewall Premature Termination Leading to Remote System Compromise

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: CERT VDE

Description
Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal services may become externally accessible, potentially allowing an unauthenticated remote attacker to connect to these services, resulting in full system compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-08-19
AI Q&A
2026-07-30
EPSS Evaluated
2026-08-18
NVD
CVE-2026-44108
EUVD
EUVD-2026-51043

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
phoenix_contact charx_sec-3xxx to 1.9.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-696 The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways that may produce resultant weaknesses.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is caused by a flaw in script execution order during system shutdown. The firewall shuts down too early, leaving a temporary gap where internal services are exposed to external access. This could allow an unauthenticated remote attacker to connect and potentially take full control of the system.

Detection Guidance

Detecting this vulnerability requires monitoring firewall state during system shutdown. Check system logs for firewall termination events before full shutdown completion. Use commands like 'journalctl -b | grep firewall' or 'dmesg | grep -i firewall' to identify premature termination. Network monitoring tools can detect unexpected external service exposure during shutdown.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to your system, data breaches, or complete system compromise. Attackers might steal sensitive data, install malware, or disrupt operations during the shutdown window.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR or HIPAA by exposing sensitive data during the shutdown window. Unauthorized access risks data leaks, leading to potential legal penalties, fines, or reputational damage.

Mitigation Strategies

Immediately update firewall software to the latest version. Configure system shutdown scripts to ensure firewall termination occurs only after all services are fully stopped. Implement network segmentation to limit exposure during shutdown windows. Monitor external connections during shutdown periods for suspicious activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44108. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart