OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution

cve CVE-2026-58138 1 source, 1 claim · Watch

What each source says

PropertySourceSaidMeans here
Author
author
Exploit-DBbanyamer
receipt
Source
Exploit-DB
Its words
banyamer
Read by
field:author
Said since
2026-09-29 09:40 UTC
Last answered
2026-10-04 12:06 UTC
Original
open at the source
What the source handed over
{
  "aliases": "",
  "application_url": "",
  "author": "banyamer",
  "codes": "CVE-2026-58138",
  "date_added": "2026-08-10",
  "date_published": "2026-08-10",
  "date_updated": "2026-08-10",
  "description": "OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution",
  "file": "exploits/multiple/webapps/52633.py",
  "id": "52633",
  "platform": "multiple",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "webapps",
  "verified": "0"
}
—
Platform
platform
Exploit-DBmultiple
receipt
Source
Exploit-DB
Its words
multiple
Read by
field:platform
Said since
2026-09-29 09:40 UTC
Last answered
2026-10-04 12:06 UTC
Original
open at the source
What the source handed over
{
  "aliases": "",
  "application_url": "",
  "author": "banyamer",
  "codes": "CVE-2026-58138",
  "date_added": "2026-08-10",
  "date_published": "2026-08-10",
  "date_updated": "2026-08-10",
  "description": "OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution",
  "file": "exploits/multiple/webapps/52633.py",
  "id": "52633",
  "platform": "multiple",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "webapps",
  "verified": "0"
}
—
Type
type
Exploit-DBwebapps
receipt
Source
Exploit-DB
Its words
webapps
Read by
field:type
Said since
2026-09-29 09:40 UTC
Last answered
2026-10-04 12:06 UTC
Original
open at the source
What the source handed over
{
  "aliases": "",
  "application_url": "",
  "author": "banyamer",
  "codes": "CVE-2026-58138",
  "date_added": "2026-08-10",
  "date_published": "2026-08-10",
  "date_updated": "2026-08-10",
  "description": "OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution",
  "file": "exploits/multiple/webapps/52633.py",
  "id": "52633",
  "platform": "multiple",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "webapps",
  "verified": "0"
}
—
Verified
verified
Exploit-DBfalse
receipt
Source
Exploit-DB
Its words
0
Read by
field:verified
Said since
2026-09-29 09:40 UTC
Last answered
2026-10-04 12:06 UTC
Original
open at the source
What the source handed over
{
  "aliases": "",
  "application_url": "",
  "author": "banyamer",
  "codes": "CVE-2026-58138",
  "date_added": "2026-08-10",
  "date_published": "2026-08-10",
  "date_updated": "2026-08-10",
  "description": "OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution",
  "file": "exploits/multiple/webapps/52633.py",
  "id": "52633",
  "platform": "multiple",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "webapps",
  "verified": "0"
}
—

exploit

OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution
zetlyn/cve-exploitdb · 2026-08-10
author banyamer platform multiple type webapps verified false source