org.conductoross vulnerabilities

Products

• org.conductoross/conductor-core 1

Latest org.conductoross CVEs

Newest publication first

1. CVE-2025-26074 Conductor vulnerable to OS command injection through unrestricted access to Java classes

   Published 2025-06-30

   Critical·CVSS 9.8 EPSS 0.71%

   Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.