Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Unauthenticated RCE CVE-2026-58138 in Orkes Conductor is actively exploited; Fortinet blocked ~7,000 attacks; patch to 3.30.2.
82
Country
U.A.E.
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 3, 2026
- Last mentionedSep 19, 2026
Timeline
2 articles · newest firstThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
Microsoft warns of Teams IT-impersonation intrusions deploying Node.js implants; Spring Ring vishing hit 150+ employees across 10 companies; The Gentlemen ransomware claims 683 victims.
72
Related CVEs
by mentions- CVE-2026-581389%9.3Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS…
Appears with
- ScreenConnectproduct · 1
- The Outsidermalware · 1
- GraalVMproduct · 1
- ChenLunthreat actor · 1
- Palo Alto Networks Unit 42vendor · 1
- Group-IBvendor · 1
- Empirical Securityorganization · 1
- iZOOlogicorganization · 1
- Previdianorganization · 1
- Microsoftvendor · 1
- BlueKitmalware · 1
- Orkesvendor · 1
- ZeroBECorganization · 1
- Spring Ringthreat actor · 1
- Fortinetorganization · 1
- Node.jsproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.