CVE-2026-58138-Conductor-Unauth-RCE

CVE-2026-58138 — Conductor RCE non autenticato tramite valutatore INLINE GraalVM Conductor OSS / Orkes3.21.21 … prima di 3.30.2 valuta JavaScript fornito dall'utente nei task INLINE e LAMBDA / DOWHILE / SWITCH con un contesto GraalVM costruito con accesso host completo HostAccess.ALL. Lo script...

OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution

!/usr/bin/env python3 Exploit Title: OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution CVE: CVE-2026-58138 Date: 2026-07-10 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity Author GitHub: https://github.com/mbanyamer Author Blog :...