|
|
| FortiGuard Labs | FortiGuard Center - Outbreak Alerts |
Orkes Conductor Evaluator Remote Code Execution
Attackers are actively targeting Orkes Conductor servers vulnerable to CVE-2026-58138, a critical unauthenticated remote code execution vulnerability in its GraalVM script evaluators. FortiGuard telemetry is observing active attack attempts targeting vulnerable Orkes Conductor deployments.
The vulnerability allows an unauthenticated attacker to submit a malicious workflow definition containing JavaScript or Python expressions to the Conductor workflow API. Because vulnerable evaluators can be configured with unrestricted host access, the attacker can escape the intended scripting environment and execute arbitrary operating system commands with the privileges of the Conductor process.
Public proof-of-concept exploit code is available, including a working exploit targeting Conductor v3.23.0. Exploit material has also been published through Exploit-DB, increasing the likelihood of opportunistic scanning and exploitation of exposed deployments. |
QuickFox Supply Chain Attack
FortiGuard Labs has uncovered a long-running supply chain compromise targeting QuickFox, a Windows VPN/network acceleration application primarily used by overseas Chinese users. Attackers tampered with official Windows installers to deploy a custom backdoor tracked as FDMTP, enabling selective victim profiling and post-compromise access. The campaign has reportedly been active since August 2025 before being publicly disclosed in August 2026. |
WP2Shell RCE
FortiGuard Labs continues to detect exploitation attempts targeting the WP2Shell attack chain (CVE-2026-63030 and CVE-2026-60137), a critical unauthenticated remote code execution (RCE) vulnerability affecting WordPress Core. Telemetry collected over the past seven days shows the highest volume of blocked attacks originating from or targeting Poland, Australia, Japan, the United States, and Turkey. |
| | Distributed by aarss.com. |
|
|
|
|
Services Provided By Joes Cable
|
| Our extensive list of cabling
includes Cat3 for your Phone Systems, Cat5, Cat5e & Cat6 (UTP & STP) for
your Networks, RG6 & RG59 for your Video or Surveillance Systems, and
Fiber for High Speed Networks and Backbones , as well as RG58 for Older
ThinNet Networks. With a set of Blue Prints, or a quick Walkthrough of
your Home or Office we can provide a mapping of a Structured Cabling
System that best suits the needs of you or your company. From start to
finish, or just adding a new computer on your network Joe's Cable has a
qualified team of experts to do the job for you.
While some needs are small you would want to make sure that the job is
done right the first time, that's why mapping a structured cabling system
for everyone before cabling work is performed can be provided. |
 |
 |
 |
|