Back to the CVE list
CVE-2026-5813

SQL injection

CVSS score

7.3

EPSS probability

%0.4

Risk score

0.0

Published

6 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

critical-severity unauthenticated Remote Code Execution (RCE) vulnerability impacting Orkes Conductor

Public PoCSource updated: 01.10.2026 07:00:29

CVE-2026-58138

Public PoCSource updated: 18.09.2026 11:08:16

Procjevt/CVE-2026-58138

Public PoCSource updated: 27.07.2026 00:40:15

CVE-2026-58138 - Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator

Public PoCSource updated: 22.07.2026 17:29:55

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).

Public PoCSource updated: 14.08.2026 09:02:43

seqra/cve-2026-58138

Public PoCSource updated: 15.07.2026 16:07:18

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).

Public PoCSource updated: 30.06.2026 19:49:03

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-5813"