Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Brief
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.
The vulnerability in question is CVE-2026-58138 (CVSS v3. 1 score: 9. 8/CVSS v4 score: 9. 3), which relates to a case of unauthenticated remote code execution.
"Orkes Conductor 3.
- 21 before 3.
- 2 contains an unauthenticated remote code execution vulnerability that allows remote