// day
Jan 29, 2026
2 new incidents, 0 with updates.
## started
- criticalclosedpatchedclosed Apr 30, 2026
Ivanti EPMM code injection CVE-2026-1340 exploited
› Ivanti Endpoint Manager Mobile (EPMM)
Ivanti Endpoint Manager Mobile (EPMM) CVE-2026-1340 — unauthenticated RCE via code injection — was exploited in limited attacks disclosed late January 2026. CISA later ordered federal agencies to patch within days in April when adding/prioritizing the KEV entry.
CVE-2026-1340 - highclosedpatchedclosed Jan 29, 2026
Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
› Ivanti Endpoint Manager Mobile (EPMM)
Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution. Added to CISA KEV on 2026-01-29.
CVE-2026-1281
