CVE-2026-1340 Ivanti Endpoint Manager Mobile
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
- CVSS
- 9.8 Critical
- EPSS
- 99%
- Percentile
- 100
- Published
- 2026-01-29
- Force
- 10 of 12
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
- Added
- 2026-04-08
- Federal patch deadline
- 2026-04-11
- Ransomware use
- not known