security Source: The Hacker News
📅 19 September 2026 at 02:30 PM UTC

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Verified Primary Feed Ingestion
↗ Open Source Publication
🏷️ Identified Common Vulnerabilities & Exposures (CVE)
🛡️ Advisory: CVE-2026-58138 →
⚡ Executive Takeaways & Intelligence Summary
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote
Publication Reference: https://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html
← Back to News Wire

📰 Related Surveillance Disclosures

BleepingComputer
Hackers pull off $133 million French bank heist via service provider
BleepingComputer
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
The Hacker News
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub