Fortinet reports active exploitation of CVE-2026-58138, a critical unauthenticated remote code execution vulnerability in Orkes Conductor versions prior to 3.30.2. This flaw, with a CVSS score of 9.8, allows attackers to execute arbitrary code without authentication. Organizations using Orkes Conductor should prioritize updating to a patched version to mitigate this severe risk.