Shared answers to live risk questions, for operators and their agents.
Distributed Risk answers the shared part of a live risk question for operators and banks in harder corridors. When the remainder needs field work, a known institutional name, or a priced hedge, that work is handed off.
Read the desk here, or connect your agent to it. It reads the same notes, and searches the official record they cite.
- 1.What the list says
- 2.What changed
- 3.Which date it turns on
Each note starts with the official record.
Then we say what we think it means.
Current
Entry 100 · 23 Oct 2026Arista VeloCloud Orchestrator SQL Injection Vulnerability Added to CISA KEV
CISA added CVE-2026-114625, a SQL injection vulnerability in Arista VeloCloud Orchestrator, with a federal remediation due date of 26 October 2026.
Read the noteSources
- [1]Arista VeloCloud Orchestrator SQL Injection Vulnerabilitynvd.nist.gov
- [2]CVE record CVE-2026-114625cve.org
- [3]CISA Known Exploited Vulnerabilities Catalogcisa.gov
What a public note covers
For the person who has to check: what the list says, what changed, which date it turns on — with a citation you can open. Screen the name. Calendar the hold.
MethodDesk
100- 100Arista VeloCloud Orchestrator SQL Injection Vulnerability Added to CISA KEVCISA KEV · 3 sources23 Oct 2026
- 099Quest Diagnostics files 8-K Item 8.01 cybersecurity incident disclosureSEC EDGAR · 1 source22 Oct 2026
- 097Jupyter Server gateway WebSocket handler bypasses kernel execute authorizationOSV · 1 source22 Oct 2026
- 095CISA Publishes Guidance on AI Token Consumption for Operational ResilienceCISA · 1 source22 Oct 2026
- 098Iran-related designations; Belarus and North Korea removals; Iran and Russia general licenses and amended FAQsOFAC · 1 source21 Oct 2026
- 096OSV advisory MAL-2026-2144: malicious litellm versions on PyPIOSV · 1 source21 Oct 2026
Your agent can read the desk, and the record behind it.
Connect any MCP client. Your agent reads the notes with their sources, searches the US screening lists, and checks OFAC's recent actions, CISA's exploited-vulnerability catalog, the Federal Register and State travel advisories. Every answer links the official source.
Connect an agentMCP
Read-only · no keyEndpoint
https://www.distributedrisk.com/mcp
The desk
list_notes
List desk notes
search_notes
Search desk notes
get_note
Read a desk note
The official record
search_screening_lists
Search the US screening lists
list_ofac_actions
OFAC recent actions
search_kev
Search CISA's KEV catalog
search_federal_register
Search the Federal Register
list_travel_advisories
State travel advisories
get_reference_rates
New York Fed reference rates
get_treasury_yields
Treasury par yield curve
Further help
If you need more than the public record for the decision in front of you, inquire. That can be conditions on the ground, a name your committee already trusts, or cover someone will underwrite.
- 099Quest Diagnostics files 8-K Item 8.01 cybersecurity incident disclosure22 Oct 2026
- 097Jupyter Server gateway WebSocket handler bypasses kernel execute authorization22 Oct 2026
- 095CISA Publishes Guidance on AI Token Consumption for Operational Resilience22 Oct 2026
- 098Iran-related designations; Belarus and North Korea removals; Iran and Russia general licenses and amended FAQs21 Oct 2026