Tag

#graalvm

1 story tagged graalvm.

Abstract visualization of escalating blocked attack attempts targeting Orkes Conductor CVE-2026-58138, with 1,290 blocked in 24 hours and 6,696 over 7 days.

Orkes Conductor pre-auth RCE exploited: patch your workflows

Orkes Conductor CVE-2026-58138 is a CVSS 9.8 unauthenticated RCE in GraalVM script evaluators, actively exploited since August 2026. Upgrade to 3.30.2 now.

Lars Cornelissen · Sep 19, 2026