~/article/critical-pre-auth-rce-in-orkes-conductor-workflow-platform-exploited-in-18eihj

critical2026-09-19 08:18 UTCSource: The Hacker News

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

Read at the source

Summary written for cymesh.dev. The full article lives at The Hacker News.

Referenced CVEs

CVE-2026-58138

Topics

rce cve

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/critical-pre-auth-rce-in-orkes-conductor-workflow-platform-exploited-in-18eihj

2026-10-01 05:00 UTC[med]

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Referenced CVEs

Topics

This is what cymesh.net is for

Related

The vulnerabilities AI finds are the ones attackers want

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Cisco warns of new SD-WAN zero-day exploited in attacks

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery