CISA Issues Warning on Critical Ivanti EPMM Flaw Exploited in Ongoing Attacks

CISA warns of a critical unauthenticated code-injection vulnerability (CVE-2026-1340) in Ivanti Endpoint Manager Mobile (EPMM) that is being actively exploited; organizations are urged to apply Ivanti's fixes or mitigations immediately, follow BOD 22-01 guidance, monitor for suspicious activity, and discontinue use if unpatchable.