Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Attackers are exploiting CVE-2026-58138 in Orkes Conductor, an unauthenticated RCE fixed in version 3.30.2.
More info