URL has been copied successfully!
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild


Tags: , , , ,

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.”Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Microsoft Patch Tuesday 2025 Year in Review
  2. ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers
  3. Microsoft Entra ID RCE Flaw Lets Unauthorized Attackers Execute Code Remotely
  4. Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws