Empirical Security

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 18, 2026
Last mentionedSep 18, 2026

Timeline

1 articles · newest first

Critical Orkes Conductor Vulnerability Exploited in Attacks

Attackers actively exploit CVE-2026-58138 (CVSS 9.8), an unauthenticated RCE in Orkes Conductor via malicious JavaScript or Python expressions in inline workflows.

SecurityWeekSep 18, 08:42 UTC · Sep 18, 2026Exploit / PoCExploitedCVE-2026-581384 · 2 reads

Related CVEs

by mentions

CVE-2026-581389%9.3
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS…
published Jun 30, 2026PoC

Appears with

Fortinetvendor · 1
Orkesvendor · 1
Orkes Conductorproduct · 1

Entities are extracted by the model from each article. First seen Sep 18, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.