Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-19 08:18 UTC
Importiert: 2026-09-24 18:31 UTC
CVSS: 9.8
Quelle-ID: thn_global
uid_hash: 89ef9c00fd9500581af657d1f1a87250d1c5a8e2aefdbde9ec824177204ac69b

The Hacker News

Inhalt

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.

The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.

"Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-58138	CRITICAL	9.8	CRITICAL	9.8			2026-06-30

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste