THREATOPS

THREAT OPS › CVEs › CVE-2026-1340

CVE-2026-1340 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA KEVExploited: confirmedIvanti

Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution.

Vulnerability details

Affected productsEndpoint Manager Mobile (EPMM)
KEV remediation due2026-04-11

Related reporting

Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)watchtowr
April 2026 CVE Landscaperecordedfuture