CVE-2026-1340

LLM-synthesized narrative grounded in this CVE's description and references.

• Ivanti/Endpoint Manager Mobile2 versions

  cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*range: <=12.7.0.0
  • (no CPE)

• forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340nvdVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdThird Party AdvisoryUS Government Resource

• Max-Severity Ivanti Flaw Exploited 24 Hours After Disclosure
  Dark Reading · Jun 11, 2026
• CISA gives feds four days to patch Ivanti flaw exploited as zero-day
  BleepingComputer · May 8, 2026
• Ivanti EPMM vulnerability exploited in zero-day attacks (CVE-2026-6973)
  Help Net Security · May 8, 2026
• Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks
  SecurityWeek · May 8, 2026
• Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access
  The Hacker News · May 7, 2026
• Ivanti warns of new EPMM flaw exploited in zero-day attacks
  BleepingComputer · May 7, 2026
• 13th April – Threat Intelligence Report
  Check Point Research · Apr 13, 2026
• Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)
  watchTowr Labs · Jan 30, 2026