CVE-2026-44108 PUBLISHED

Firewall bypass during shutdown

Assigner: CERTVDE
Reserved: 05.05.2026 Published: 30.07.2026 Updated: 30.07.2026

Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal services may become externally accessible, potentially allowing an unauthenticated remote attacker to connect to these services, resulting in full system compromise.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 9.3

Product Status

Vendor Phoenix Contact
Product CHARX SEC-3150
Versions Default: unaffected
  • affected from 1.0.0 to 1.9.1 (excl.)
Vendor Phoenix Contact
Product CHARX SEC-3100
Versions Default: unaffected
  • affected from 1.0.0 to 1.9.1 (excl.)
Vendor Phoenix Contact
Product CHARX SEC-3050
Versions Default: unaffected
  • affected from 1.0.0 to 1.9.1 (excl.)
Vendor Phoenix Contact
Product CHARX SEC-3000
Versions Default: unaffected
  • affected from 1.0.0 to 1.9.1 (excl.)

Credits

  • ZDI finder

References

Problem Types

  • CWE-696 Incorrect Behavior Order CWE