You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve-2026-1340
About this tag
CVE-2026-1340 is a code injection vulnerability in Ivanti Endpoint Manager Mobile (EPMM) that CISA added to its Known Exploited Vulnerabilities Catalog on April 8, 2026, due to active exploitation in the wild. This tag covers discussions about the vulnerability, its inclusion in the KEV list, and the operational urgency it creates for defenders, particularly those in federal environments subject to BOD 22-01. The content highlights a recurring pattern of exposed management platforms in Ivanti products and emphasizes the need for prompt patching.
CISA’s latest addition to the Known Exploited Vulnerabilities Catalog is a reminder that the agency still sees active exploitation as the best signal for urgency, not just theoretical severity. On April 8, 2026, CISA added CVE-2026-1340, a code injection vulnerability in Ivanti Endpoint Manager...