23 Oct 2026Collabora Online Built-in CODE Server OS Command Injection Added to CISA KEV

Know what changed, and who can act on it.

Sanctions actions, travel advisories and exploited vulnerabilities, read from the official record and explained for the decision in front of you. When the answer needs people on the ground, an investigation or insurance, we arrange it with a partner firm that works in that country.

Brief an advisor See where we operate Read the desk

1.Protection and crisis response
2.Investigations and due diligence
3.Cyber security and insurance

Where we operate

Pick a country to see the services we can arrange there, its current State travel advisory and recent OFAC actions that name it.

Live · 23:21 UTC

World

Countries by services with in-country capability3 services24 services235 services1366 services2Deployable only10

Open the full map

What the official record says.
What it means for your decision.

Latest note

Entry 101 · 23 Oct 2026

verifiedCISA KEV · 3 sources

Collabora Online Built-in CODE Server OS Command Injection Added to CISA KEV

CISA added CVE-2026-110447, an OS command injection in Collabora Online's built-in CODE server, to the Known Exploited Vulnerabilities Catalog with a federal remediation due date of 2026-10-26.

Read the note

Sources

[1]Collabora Online Built-in CODE Server OS Command Injection Vulnerabilitynvd.nist.gov
[2]CVE record CVE-2026-110447cve.org
[3]CISA Known Exploited Vulnerabilities Catalogcisa.gov

When you need more than the record

Tell us what you need and where. An advisor matches it to a partner firm with people in that country, makes the introduction and stays your contact.

Brief an advisor

Services

Security operations
Executive and close protection · Security in conflict zones · Facility and infrastructure security · Event security
Crisis response
Crisis response and evacuation · Kidnap, extortion and detention response · Medical evacuation and assistance
Intelligence and risk advisory
Due diligence and investigations · Supply-chain integrity diligence · OSINT and strategic intelligence · Country risk and market entry
Strategic development
Government relationships and market access
Training
Training
Cyber security
Digital executive protection · Cybersecurity assessment and compliance · Managed security and 24/7 monitoring · Cyber incident response
Risk transfer
K&R, political-risk and trade-credit insurance

What a desk note tells you

What the list says, what changed and which date it turns on, with a citation you can open. Screen the name. Calendar the hold.

How a note is made

Desk

102

Use the desk from your AI assistant

Claude, ChatGPT and other AI assistants that support MCP can read the notes and search the same official sources: the US screening lists, OFAC actions, CISA's exploited-vulnerability catalog, the Federal Register and State travel advisories.

Connect an AI assistant

MCP

Read-only · no key

Endpoint

https://www.distributedrisk.com/mcp

The desk

list_notes
List desk notes
search_notes
Search desk notes
get_note
Read a desk note

The official record

search_screening_lists
Search the US screening lists
list_ofac_actions
OFAC recent actions
search_kev
Search CISA's KEV catalog
search_federal_register
Search the Federal Register
list_travel_advisories
State travel advisories
get_reference_rates
New York Fed reference rates
get_treasury_yields
Treasury par yield curve