CISA’s latest addition to the Known Exploited Vulnerabilities Catalog is a reminder that the agency still sees active exploitation as the best signal for urgency, not just theoretical severity. On April 8, 2026, CISA added CVE-2026-1340, a code injection vulnerability in Ivanti Endpoint Manager...