Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

The Hacker News - Sep 19, 2026

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

Read full article

More News

About Us
Logo

In-Depth Science delivers comprehensive and compelling news and analysis on everything science and technology, seven days a week in a reader-friendly format.

Contact us: sales[at]indepthscience.com

Copyright © 2015 - 2026 In-Depth Science. All Rights Reserved.