> TritonInfoSec News
Home / Sep 20, 2026 / Story
0
#3 The Hacker News general September 19, 2026 at 08:18 UTC

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

By [email protected] (The Hacker News)

AI Summary

CVE-2026-58138 (CVSS 9.8), an unauthenticated RCE flaw in Orkes Conductor versions prior to 3.30.2, is being actively exploited in the wild according to Fortinet, allowing remote attackers to execute arbitrary code via inline workflow definitions without any authentication. Organizations running Orkes Conductor 3.21.21 or earlier should prioritize patching immediately.

Read full article → https://thehackernews.com/2026/09/critical-pre-aut…

Relevance score: 86.0/100

# More from September 20

  1. 1
    ShinyHunters hacks Clop leak site, threatens to extort ransomware gang BleepingComputer
  2. 2
    North Korean WaterPlum hackers infected 30,000 devices worldwide BleepingComputer
  3. 4
    Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws The Hacker News
  4. 5
    Cisco Zero-Day Highlights API Endpoint Authentication Issues Dark Reading
  5. 6
    CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild The Hacker News
  6. 7
    SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE The Hacker News
  7. 8
    CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories The Hacker News
  8. 9
    Gyazo server flaw exploited to steal 23.6 million user records BleepingComputer
  9. 10
    Early Scattered Spider member pleads guilty to cybercrime spree CyberScoop