CVE-2026-58138 2

Vulnerability (CVE)

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Fortinet reports active exploitation of CVE-2026-58138, an unauthenticated remote code execution flaw in Orkes Conductor versions 3.21.21 before 3.30.2, rated 9.8 on CVSS v3.1 and 9.3 on v4. Attackers submit crafted workflow definitions with malicious...

Zero-Days & Exploits

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, Click Fix Attacks, Click Fix Surge, and Browser Hijacks

Cyber Risks The Hacker News

Cisco warned of a maximum-severity authentication bypass in Identity Services Engine, tracked as CVE-2026-76460 with a CVSS score of 10.0, that is under active exploitation and stems from insufficient authentication control on an API endpoint. The week's...

Vulnerabilities & Patching