Critical pre-authentication remote code execution vulnerability in Orkes Conductor actively exploited

According to Fortinet, an unauthenticated remote code execution vulnerability affecting Orkes Conductor is being actively exploited in the wild. The vulnerability is CVE-2026-58138, with a CVSS v3.1 score of 9.8 and a CVSS v4 score of 9.3.