OS The Hacker News CVE-2026-58138 ↗

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Sep 19, 2026, 08:18 AM · by The Hacker News

Authoritative NVD/CISA vulnerability data (read-only)

CVE-2026-58138 ↗

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.

The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.

"Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

Source: The Hacker News