CVE-2026-44108
A flaw in the shutdown process causes the firewall to stop too early, briefly exposing internal services to the outside world. This gives an attacker a chance to connect to those services and take over the system. The vulnerability is rated critical because it can lead to full compromise without any user interaction.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
No specific products or versions are listed in the CPE data, so the affected software is unknown.
Real-world impact
During the brief period when the firewall is down, an unauthenticated attacker could reach internal services, potentially gaining full control of the machine.
Why this severity
The CVSS score of 9.3 reflects that the flaw is exploitable over the network, requires no authentication, and can compromise confidentiality, integrity, and availability of the entire system. The high impact and lack of mitigations make it a critical risk.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources