Skip to main content
Back to feed
CyberConfirmedHighDevelopingFeatured
7.7

Critical Orkes Conductor RCE CVE-2026-58138 Exploited in Active Attacks

A critical unauthenticated remote code execution vulnerability (CVE-2026-58138) in Orkes Conductor is being actively exploited via inline workflow definitions. The flaw allows attackers to execute arbitrary code without authentication, posing significant risk to affected deployments. Immediate patching is advised as exploitation is confirmed in the wild.

SecurityWeekabout 6 hours agoengCredibility 32%View source

Score Breakdown

Mosaic Score7.7
Confidence0.7
Significance0.8
Source credibility0.3

Intelligence Tags

#cve-2026-58138#orkes-conductor#remote-code-execution#active-exploitation#vulnerability
Source

Related signals

8 found