CVE-2026-44108
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely. This creates a temporary window where internal services may become externally accessible, allowing an unauthenticated remote attacker to connect and fully compromise the system.
Risk Assessment
The risk is full system compromise by an unauthenticated attacker during a short window at shutdown.
Recommendation
Re-order shutdown scripts to keep the firewall active until the end, and consider adding a mechanism to block external access during restart.
Original NVD description (English source)
Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal services may become externally accessible, potentially allowing an unauthenticated remote attacker to connect to these services, resulting in full system compromise.