CVE-2026-58138

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 18, 2026

Last Seen

October 9, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Zero-Day Vulnerability in F5 BIG-IP APM Exploited for Remote Code Execution82.3

F5 Networks has reported a critical vulnerability in its BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127, which is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute remote code on systems configured with both an APM access policy and an OAuth pr...

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation80.3

A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its...

Chinese Hackers Exploit Zyxel Switch Vulnerability CVE-2026-727378.9

A Chinese-speaking threat actor has exploited a stack-based buffer overflow vulnerability (CVE-2026-7273) in Zyxel GS1900 switches, compromising 996 devices across 48 countries since August 17, 2026. The vulnerability allows unauthenticated attackers to execute OS commands via crafted HTTP requests....

Critical CVE-2026-58138 in Orkes Conductor Exploited in the Wild75.0

A critical vulnerability, CVE-2026-58138, in Orkes Conductor allows unauthenticated remote code execution. This flaw, affecting versions prior to 3.30.2, enables attackers to submit malicious JavaScript or Python expressions via the workflow API endpoint. Exploitation can invoke arbitrary system com...