sign in--:--:--UTC

CVE-2026-58138

exploited in the wild☆ pin

CVSS

9.8

Reports

2

First seen

Sep 19, 2026

Last seen

Sep 21, 2026

Affected product

Orkes Conductor 3.21.21 before 3.30.2

Associated actors

Hacktron ×1 NightmareStresser ×1 Panzer ×1 REF9334 ×1

Recent reports

Weekly Recap: Cisco ISE 0-Day, AI Agent RCE, ClickFix Attacks, Supply-Chain Breaches

The Hacker NewsSep 21, 2026 Critical

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

The Hacker NewsSep 19, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans