Lucene search
+L

6 matches found

NVD
NVD
•added 2026/06/30 7:17 p.m.•54 views

CVE-2026-58138

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to...

9.8CVSS0.14687EPSS
SaveExploits6References5
Cvelist
Cvelist
•added 2026/06/30 6:44 p.m.•78 views

CVE-2026-58138 Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to...

9.8CVSS0.14687EPSS
SaveExploits6References5
Vulnrichment
Vulnrichment
•added 2026/06/30 6:44 p.m.•17 views

CVE-2026-58138 Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to...

9.8CVSS7AI score0.14687EPSS
SaveExploits6References5
attackerkb
attackerkb
•added 2026/06/30 6:44 p.m.•21 views

CVE-2026-58138

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to...

9.8CVSS7.1AI score0.14687EPSS
SaveExploits6References6Affected Software1
EUVD
EUVD
•added 2026/06/30 6:44 p.m.•29 views

EUVD-2026-40377

Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions to the workflow API endpoint prior to...

9.8CVSS7.1AI score0.14687EPSS
SaveExploits6References5
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•31 views

PT-2026-53941

Name of the Vulnerable Software and Affected Versions Orkes Conductor versions 3.21.21 through 3.30.1 Description An unauthenticated remote code execution issue exists that allows remote attackers to execute arbitrary OS commands. This is achieved by submitting inline workflow definitions...

9.8CVSS6.9AI score0.14687EPSS
SaveExploits6References65
Rows per page
Query Builder