Orkes Conductor

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 18, 2026
Last mentionedSep 19, 2026

Timeline

2 articles · newest first

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Unauthenticated RCE CVE-2026-58138 in Orkes Conductor is actively exploited; Fortinet blocked ~7,000 attacks; patch to 3.30.2.

The Hacker NewsSep 19, 08:18 UTC · Sep 19, 2026Exploit / PoCExploitedCVE-2026-581382 · 2 reads

Critical Orkes Conductor Vulnerability Exploited in Attacks

Attackers actively exploit CVE-2026-58138 (CVSS 9.8), an unauthenticated RCE in Orkes Conductor via malicious JavaScript or Python expressions in inline workflows.

SecurityWeekSep 18, 08:42 UTC · Sep 18, 2026Exploit / PoCExploitedCVE-2026-581384 · 2 reads

Related CVEs

by mentions

CVE-2026-581389%9.3
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS…
published Jun 30, 2026PoC

Appears with

Fortinetvendor · 2
Orkesvendor · 2
Empirical Securityorganization · 1
Previdianorganization · 1
GraalVMproduct · 1
Empirical Securityvendor · 1
Fortinetorganization · 1

Entities are extracted by the model from each article. First seen Sep 18, 2026, last mentioned Sep 19, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.