importantSYS.SOURCE: The Hacker News• 2026-09-19T13:48:54+05:30

Critical Pre-Auth RCE Vulnerability in Orkes Conductor Workflow Platform Exploited in the Wild

#rce #vulnerability #cybersecurity

A critical pre-authenticated remote code execution (RCE) vulnerability (CVE-2026-58138) in Orkes Conductor allows attackers to execute arbitrary commands without authentication, with active exploitation reported. Organizations are advised to upgrade to version 3.30.2 or later to mitigate the risk.

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.

The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution.

"Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote

Read original article

*** END OF TRANSMISSION ***

> CRITICAL PRE-AUTH RCE VULNERABILITY IN ORKES CONDUCTOR WORKFLOW PLATFORM EXPLOITED IN THE WILD > GOOGLE GEMINI AI SYSTEM UNAUTHORIZED ACCESS INCIDENT DUE TO DOMAIN NAMING ERROR > CROWDSEC DISCLOSES DATA BREACH VIA TANSTACK NPM SUPPLY CHAIN ATTACK INVOLVING 170 PRIVATE GITHUB REPOSITORIES > GPT-6 ASTRA DECIPHERS WWI GERMAN RADIO CIPHER USING ADFGVX METHOD > REEVALUATING MATHEMATICAL VALUE: BEYOND PROOFS TO MOTIVATED EXPLANATIONS > CISA IDENTIFIES THREE ACTIVELY EXPLOITED LINUX KERNEL VULNERABILITIES > APPLE M6 PRO SETS NEW SINGLE-CORE CPU BENCHMARK RECORD IN GEEKBENCH 7 > STANFORD MEDICINE RESEARCH REVEALS HUMAN BRAIN COMPOSED OF TWO DISTINCT ORGANS > STEPFUN STEP 5 PREVIEW: AI MODEL PERFORMANCE AND PRICING ANALYSIS > NASA AND IBM COLLABORATE ON OPEN-SOURCE GEOSPATIAL AI MODEL FOR LUNAR EXPLORATION> CRITICAL PRE-AUTH RCE VULNERABILITY IN ORKES CONDUCTOR WORKFLOW PLATFORM EXPLOITED IN THE WILD > GOOGLE GEMINI AI SYSTEM UNAUTHORIZED ACCESS INCIDENT DUE TO DOMAIN NAMING ERROR > CROWDSEC DISCLOSES DATA BREACH VIA TANSTACK NPM SUPPLY CHAIN ATTACK INVOLVING 170 PRIVATE GITHUB REPOSITORIES > GPT-6 ASTRA DECIPHERS WWI GERMAN RADIO CIPHER USING ADFGVX METHOD > REEVALUATING MATHEMATICAL VALUE: BEYOND PROOFS TO MOTIVATED EXPLANATIONS > CISA IDENTIFIES THREE ACTIVELY EXPLOITED LINUX KERNEL VULNERABILITIES > APPLE M6 PRO SETS NEW SINGLE-CORE CPU BENCHMARK RECORD IN GEEKBENCH 7 > STANFORD MEDICINE RESEARCH REVEALS HUMAN BRAIN COMPOSED OF TWO DISTINCT ORGANS > STEPFUN STEP 5 PREVIEW: AI MODEL PERFORMANCE AND PRICING ANALYSIS > NASA AND IBM COLLABORATE ON OPEN-SOURCE GEOSPATIAL AI MODEL FOR LUNAR EXPLORATION