--- title: CISA orders feds to patch exploited Ivanti EPMM flaw by... description: CISA has added CVE-2026-1340, a critical code injection flaw in Ivanti Endpoint Manager Mobile (EPMM), to its Known Exploited Vulnerabilities catalog and... canonical: https://daily.dev/posts/cisa-orders-feds-to-patch-exploited-ivanti-epmm-flaw-by-sunday-q37rvz2h1 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday | daily.dev og:description: CISA has added CVE-2026-1340, a critical code injection flaw in Ivanti Endpoint Manager Mobile (EPMM), to its Known Exploited Vulnerabilities catalog and... og:url: https://daily.dev/posts/cisa-orders-feds-to-patch-exploited-ivanti-epmm-flaw-by-sunday-q37rvz2h1 og:image: https://api.daily.dev/og/posts/Q37RvZ2H1.png og:image:alt: CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 1 upvotes · 0 comments ## Summary CISA has added CVE-2026-1340, a critical code injection flaw in Ivanti Endpoint Manager Mobile (EPMM), to its Known Exploited Vulnerabilities catalog and ordered U.S. federal agencies to patch by April 11. The vulnerability allows unauthenticated remote code execution on internet-exposed appliances and has been actively exploited since January. Ivanti released patches on January 29, but nearly 950 EPMM instances remain exposed online. CISA also urges private sector organizations to prioritize patching. This is the 33rd Ivanti vulnerability CISA has flagged as exploited in attacks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISA warns of actively exploited Ivanti EPM and Cisco SD-WAN flaws](https://daily.dev/posts/cisa-warns-of-actively-exploited-ivanti-epm-and-cisco-sd-wan-flaws-h3npt1jng) · CSO Online · 0 upvotes · 0 comments - [CISA orders feds to patch Windows flaw exploited as zero-day](https://daily.dev/posts/cisa-orders-feds-to-patch-windows-flaw-exploited-as-zero-day-gw4v2yydq) · BleepingComputer · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#zero-day](https://daily.dev/tags/zero-day) [View this post on daily.dev](https://daily.dev/posts/cisa-orders-feds-to-patch-exploited-ivanti-epmm-flaw-by-sunday-q37rvz2h1) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday","url":"https://daily.dev/posts/cisa-orders-feds-to-patch-exploited-ivanti-epmm-flaw-by-sunday-q37rvz2h1","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cisa-orders-feds-to-patch-exploited-ivanti-epmm-flaw-by-sunday-q37rvz2h1"},"datePublished":"2026-04-08T18:16:08.143Z","dateModified":"2026-04-08T18:18:49.313Z","description":"CISA has added CVE-2026-1340, a critical code injection flaw in Ivanti Endpoint Manager Mobile (EPMM), to its Known Exploited Vulnerabilities catalog and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3536228e363c291a8b5671c819f6c669?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3536228e363c291a8b5671c819f6c669?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cisa-orders-feds-to-patch-exploited-ivanti-epmm-flaw-by-sunday-q37rvz2h1","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,zero-day","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday"}]} ```