CVE-2026-1340: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Added to the CISA Known Exploited Vulnerabilities catalog on 08 Apr 2026. Vendor: Ivanti. Product: Endpoint Manager Mobile (EPMM).

Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution.

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. (due 11 Apr 2026)