Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window …

CVE-2026-44108 describes a vulnerability caused by a flaw in the execution order of scripts during system shutdown. The firewall is terminated prematurely before other internal services are stopped, creating a temporary window of exposure. During this window, internal services may become externally accessible to unauthenticated remote attackers. This could allow an attacker to connect to otherwise protected services and achieve full system compromise. The vulnerability is considered critical due to the potential for unauthenticated remote access. It affects systems where shutdown script ordering can be influenced or predicted. The issue is documented by CERT VDE under advisory VDE-2026-008. No authentication is required to exploit this vulnerability during the exposure window.