{"vulnerability": "CVE-2026-5813", "sightings": [{"uuid": "a8e89181-118c-495c-b8d2-170a2cc2c740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mizm6yb3co2o", "content": "", "creation_timestamp": "2026-04-09T01:00:13.331424Z"}, {"uuid": "48639bd6-b132-42cc-8b6d-cf49ee85f1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5813", "type": "published-proof-of-concept", "source": "Telegram/XRvc7f-x7KgmkvO7GcbaizI94C7ZhNHc5jsbe-dfAO5iAWk", "content": "", "creation_timestamp": "2026-04-09T01:28:16.000000Z"}, {"uuid": "875fd95a-0c34-4bb4-be48-ab672683691e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58138", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mpm3tty4fp25", "content": "CVSS 9.8. Unauthenticated. Remote code execution. No credentials required.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-58138-orkes-conductor-unauth-rce-poc/\n\n#InfoSec #DataBreach", "creation_timestamp": "2026-07-01T17:59:24.846064Z"}, {"uuid": "ee84b475-dc0c-4a89-a1e8-e0178f6e6a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://t.me/GithubRedTeam/91343", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138-Conductor-Unauth-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 19:49:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:16.124089Z"}, {"uuid": "0eaaf680-2801-413a-93d4-db083310a614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://t.me/GithubRedTeam/91343", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138-Conductor-Unauth-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 19:49:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:32.744832Z"}, {"uuid": "755fe120-cb17-488f-b0a9-cb8ea07e4b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91343", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138-Conductor-Unauth-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 19:49:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:25.663039Z"}, {"uuid": "11be28ad-ee8d-4e87-a344-6addc39507b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93570", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a seqra\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 16:07:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:04.822425Z"}, {"uuid": "d83bfd91-46a9-45a4-9ae6-3467b0e3759a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93602", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ch4120N\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 20:36:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:04.915548Z"}, {"uuid": "cbe16dd5-b878-4206-9ba1-e099d09f9a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/aLUBIgd1oXw2vuhuFf6alCjtWAQyS8DwghI3-yppd5LMZjw", "content": "", "creation_timestamp": "2026-07-16T19:00:04.332675Z"}, {"uuid": "e6a9f421-9684-4e46-b8b7-9971500e28fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/NdtFs6hNB9_NZbjw-blRCy5VLViEDDk3craQ6x0AEbHqe3s", "content": "", "creation_timestamp": "2026-07-16T19:00:05.481977Z"}, {"uuid": "708ccf85-3211-43b7-9f95-6af804620b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-16T19:00:25.336424Z"}, {"uuid": "3a413567-696f-48e7-a15f-65fe58ba08ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/EU_Y1WTP7XC2Unqgh398sSMzruBTYdUozEbcjvnJL3mtgJg", "content": "", "creation_timestamp": "2026-07-16T19:00:25.668380Z"}, {"uuid": "43fd28fe-5d60-4f54-929e-5867ed3f6c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/aLUBIgd1oXw2vuhuFf6alCjtWAQyS8DwghI3-yppd5LMZjw", "content": "", "creation_timestamp": "2026-07-17T00:00:26.194756Z"}, {"uuid": "95b7a234-e239-48d4-ae0a-a6122aee44b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/NdtFs6hNB9_NZbjw-blRCy5VLViEDDk3craQ6x0AEbHqe3s", "content": "", "creation_timestamp": "2026-07-17T00:00:25.523735Z"}, {"uuid": "0660fed4-edd9-46f9-a048-917028273e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-17T00:00:41.594686Z"}, {"uuid": "18408ba6-d076-474b-a1d7-4630ddfccebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/EU_Y1WTP7XC2Unqgh398sSMzruBTYdUozEbcjvnJL3mtgJg", "content": "", "creation_timestamp": "2026-07-17T00:00:41.920806Z"}, {"uuid": "09bae698-04f3-4d4c-8673-aa93bf3ec7b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93602", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ch4120N\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 20:36:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 \u2014 Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:55.061433Z"}, {"uuid": "76f87c5c-4cf8-4553-95e9-a776567a7326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93570", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a seqra\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 16:07:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:54.982910Z"}, {"uuid": "8f2c56a3-72f4-47c5-9470-74ec6e176afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/EU_Y1WTP7XC2Unqgh398sSMzruBTYdUozEbcjvnJL3mtgJg", "content": "", "creation_timestamp": "2026-07-18T00:00:09.179207Z"}, {"uuid": "058edc1e-3839-4e99-891b-93d257bcd680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/qDbx2CcWW1ljYrgbnUu6Ex1maUX2VAjENXcPvjZN2_dh6iU", "content": "", "creation_timestamp": "2026-07-18T00:00:09.721484Z"}, {"uuid": "a5d190b9-2430-4048-9248-99cb22618690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/DBXTERSLEARNING/1212", "content": "[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution\n\nCVE-2026-58138 | 2026-08-10\n\n\ud83d\udd17 View  |  \u2b07\ufe0f Download", "creation_timestamp": "2026-08-22T21:00:06.088080Z"}, {"uuid": "7bfe3ca1-32bc-4736-abfd-869367a7aabe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/DBXTERSLEARNING/1212", "content": "[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution\n\nCVE-2026-58138 | 2026-08-10\n\n\ud83d\udd17 View  |  \u2b07\ufe0f Download", "creation_timestamp": "2026-08-23T00:00:30.131303Z"}, {"uuid": "305b93ed-c099-437b-ae4c-b5408f3d2b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/6xbzrZHKWlySmltoOKJREHJqOUlaPiDVN1mUGUuwPSWTXlo", "content": "", "creation_timestamp": "2026-07-22T20:00:03.681731Z"}, {"uuid": "e3bca2a1-979a-46aa-b0e9-b04d8d567c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "content": "", "creation_timestamp": "2026-07-22T22:00:03.589918Z"}, {"uuid": "4ce0c7c7-02c8-41ac-838d-3aba53251176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/oTCcthwftzUyvaLQLtY7FvG4NjMlnlzCmFsPRxIzpTLAzWg", "content": "", "creation_timestamp": "2026-07-23T00:00:05.047613Z"}, {"uuid": "5cad1937-5bfd-46f3-838c-805f3344d360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/6xbzrZHKWlySmltoOKJREHJqOUlaPiDVN1mUGUuwPSWTXlo", "content": "", "creation_timestamp": "2026-07-23T00:00:05.240063Z"}, {"uuid": "8771c50c-f157-434c-920a-5809fd050186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://t.me/GithubRedTeam/94689", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 17:29:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 - Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:05.189271Z"}, {"uuid": "41ec2be4-50e2-4608-a683-2bba92060ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94689", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58138\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xgh057r3c0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 17:29:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-58138 - Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:21.458600Z"}, {"uuid": "fd6fb8a1-2874-49ce-b110-1e2ea291a4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/avwe1IcYmRD-5NAjxT7DyS1BekCoG2eAtzuvWz8J9dYWgZo", "content": "", "creation_timestamp": "2026-07-27T05:00:02.886082Z"}, {"uuid": "e40e8fb9-5b15-49a3-a314-dfe27e3fd68c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90374388-1ad1-41e2-8cf2-28ed09a464b9", "content": "", "creation_timestamp": "2026-07-27T11:00:38.536154Z"}, {"uuid": "eae76908-a7a8-4b7b-8ef9-95d4c747b325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/avwe1IcYmRD-5NAjxT7DyS1BekCoG2eAtzuvWz8J9dYWgZo", "content": "", "creation_timestamp": "2026-07-28T00:00:45.898991Z"}, {"uuid": "f48e906a-3965-45c1-a0ac-d84586c2f862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-06T08:00:06.338498Z"}, {"uuid": "25d6f0bd-798d-46f6-8626-b654baa8021e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "published-proof-of-concept", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-07T01:00:24.670511Z"}, {"uuid": "a8d2d23f-15e5-4775-8cc3-b92d080a8e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvrsaew73h2v", "content": "CVE-2026-58138 enables unauthenticated remote code execution in Orkes Conductor via hostile INLINE workflow expressions that run OS commands as the Conductor process.\n", "creation_timestamp": "2026-09-18T08:54:36.440410Z"}, {"uuid": "bcc6b755-feef-4d09-af76-1800f07ca920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvrsahwrzf2i", "content": "Orkes Conductor\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u653b\u6483\u3067\u60aa\u7528\u4e2d\n\n\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u53ef\u80fd\u306aOrkes Conductor\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u3001\u5c11\u306a\u304f\u3068\u30821\u30ab\u6708\u524d\u304b\u3089\u653b\u6483\u8005\u306e\u6a19\u7684\u306b\u3055\u308c\u3066\u3044\u307e\u3059\u3002 Conductor\u306f\u3001\u30de\u30a4\u30af\u30ed\u30b5\u30fc\u30d3\u30b9\u3001\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3001AI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306e\u30aa\u30fc\u30b1\u30b9\u30c8\u30ec\u30fc\u30b7\u30e7\u30f3\u3092\u53ef\u80fd\u306b\u3059\u308b\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u7d71\u5408\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3067\u3059\u3002 CVE-2026-58138(CVS", "creation_timestamp": "2026-09-18T08:54:38.772334Z"}, {"uuid": "63b434cc-80ab-4866-9026-83c7de244cd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/sipirtu.com/post/3mvrvebcjc62r", "content": "A critical vulnerability identified as CVE-2026-58138 in Orkes Conductor allows unauthenticated remote code execution and has been exploited in attacks via inline workflow definitions.\n\nSource: SecurityWeek", "creation_timestamp": "2026-09-18T09:50:27.877363Z"}, {"uuid": "b713444b-bf7e-42d4-bf5d-2b2e88b77d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/", "content": "CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.\n\nThe post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-18T16:00:36.901079Z"}, {"uuid": "733ae392-92f9-49fb-af4d-bb525114c068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvsolbvgf22m", "content": "Why do we even bother configuring orchestration when Orkes Conductor allows unauthenticated remote code execution via CVE-2026-58138. Organisations relying on Orkes Conductor are getting battered in active attacks, courtesy of exposed inline workflow definitions. Protecting syste...\n\nRead full story", "creation_timestamp": "2026-09-18T17:21:46.424155Z"}, {"uuid": "645a470b-7c13-4dec-a3a7-822bf2d61ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58138", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvsqq4jhfc2c", "content": "Orkes Conductor hit with active exploitation of CVE-2026-58138 \u2014 unauthenticated RCE, CVSS 9.8, triggered through workflow\u2026 https://0daynews.com/articles/2026-09-18-orkes-conductor-cve-2026-58138-rce-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2396", "creation_timestamp": "2026-09-18T18:00:17.547879Z"}, {"uuid": "35369bd8-b1e4-412b-85be-28cf47589769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "seen", "source": "https://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/", "content": "CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.\n\nThe post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-19T01:00:33.163759Z"}, {"uuid": "22322da2-2ce1-47cc-9626-3c84ae190732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58138", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44487", "content": "Critical Orkes Conductor Vulnerability Exploited in Attacks\n\nCVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.\nThe post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/", "creation_timestamp": "2026-09-19T04:00:03.696458Z"}]}