security1 publisher
Attackers run root commands on Orkes Conductor with a single unauthenticated POST
Orkes Conductor evaluates workflow expressions on a GraalVM context with the sandbox disabled, and Fortinet blocked about 1,300 exploitation attempts against CVE-2026-58138 over two days in September.
Publishers:securityweek.com
Reality
- Evidence62
- Adoption58
- Hype gap−10
- Incentives55
- Confidence60