Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.
The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.
"Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote
What's Your Reaction?
Like
0
Dislike
0
Love
0
Funny
0
Angry
0
Sad
0
Wow
0
Raghib Awan
Raghib Awan is an Information Security and Technology professional with expertise spanning cybersecurity, cloud security, IT infrastructure, information risk, regulatory compliance, and enterprise security. He is also an author at TeQManch, a technology and cybersecurity news platform covering cyber threats, artificial intelligence, BFSI technology, data privacy, digital risk, and emerging technology trends.
