# What happened in US federal regulatory data — last 7 days

> Generated 2026-05-16. Cross-vertical digest aggregating SEC + FDA + CISA + NHTSA + OFAC + DOJ + federal courts + USGS + Federal Register.

## ⚠ Most-actively exploited vulnerabilities (CISA KEV)

- [CVE-2026-42897](https://api.ai-analytics.org/cve/CVE-2026-42897) — **Microsoft Microsoft** · remediate by 2026-05-29
  Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditions are met, arbitrary JavaScript can be ex
- [CVE-2026-20182](https://api.ai-analytics.org/cve/CVE-2026-20182) — **Cisco Catalyst SD-WAN** · remediate by 2026-05-17
  Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges 
- [CVE-2026-42208](https://api.ai-analytics.org/cve/CVE-2026-42208) — **BerriAI LiteLLM** · remediate by 2026-05-11
  BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the cre
- [CVE-2026-6973](https://api.ai-analytics.org/cve/CVE-2026-6973) — **Ivanti Endpoint Manager Mobile (EPMM)** · remediate by 2026-05-10
  Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.
- [CVE-2026-0300](https://api.ai-analytics.org/cve/CVE-2026-0300) — **Palo Alto Networks PAN-OS** · remediate by 2026-05-09
  Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrar

## ⚠ NHTSA park-it / park-outside vehicle recalls

_No park-it recalls in this window._

## 🏛️ Federal court filings (high-signal NOS codes)

- [Intellectual Ventures I LLC v. UnitedHealth Group Inc.](https://api.ai-analytics.org/case/73340075) — txed · NOS 830 Patent · filed 2026-05-14
- [Academia Sinica v. Microsoft Corporation](https://api.ai-analytics.org/case/73346866) — txed · NOS 830 Patent · filed 2026-05-14
- [Chen v. Coty Inc.](https://api.ai-analytics.org/case/73345573) — nysd · NOS 850 Securities/Commodities · filed 2026-05-14
- [Earin AB v. Skullcandy, Inc.](https://api.ai-analytics.org/case/73336771) — ded · NOS 830 Patent · filed 2026-05-13
- [KOTYK v. SIMON](https://api.ai-analytics.org/case/73339317) — cacd · NOS 830 Patent · filed 2026-05-13
- [Theodoulou v. Phreesia, Inc.](https://api.ai-analytics.org/case/73336768) — ded · NOS 850 Securities/Commodities · filed 2026-05-13

## 🚨 Recent DOJ press releases

- [California Man Arrested for Violating Lacey Act for Plot to Illegally Export Trafficked Turtles](https://api.ai-analytics.org/doj-release/735acfc7-4399-4ca1-ba1c-fdf55b2d1c01) — Environment and Natural Resources Division; ENRD - Environmental Crimes Section; USAO - California, Northern · 2026-05-15
- [U.S. Attorney’s Office Adds 281 New Immigration Cases in Western District of Texas](https://api.ai-analytics.org/doj-release/b05f001b-4f4d-46b4-87d9-2a49c567e880) — USAO - Texas, Western · 2026-05-15
- [Operators of Day Treatment Program for Children Agree to $15.2 Million Civil Judgment to Resolve Medicaid Fraud Allegations](https://api.ai-analytics.org/doj-release/bf385625-5a6c-4062-a0df-3df0c81f12c2) — USAO - Kentucky, Eastern · 2026-05-15
- [Michigan Home Health Care Agency Owner Convicted of $1.6M Medicare Fraud Scheme and Kickback Conspiracy](https://api.ai-analytics.org/doj-release/8fc9ad5b-1c26-4e05-b2fe-c47590625c07) — Criminal Division; Criminal - Criminal Fraud Section; Federal Bureau of Investigation (FBI); National Fraud Enforcement Division · 2026-05-15
- [Tallahassee Drug Trafficker Pleads Guilty to Distribution of Methamphetamine & Cocaine](https://api.ai-analytics.org/doj-release/e57a239b-7617-4b3d-bd26-41af6d4fb110) — Drug Enforcement Administration (DEA); USAO - Florida, Northern · 2026-05-15
- [Homeland Security Task Force investigation leads to additional narcotics seizures, current total of more than 700 pounds of suspected cocaine with street value of $5.8 million](https://api.ai-analytics.org/doj-release/472365fb-6c3d-4617-9628-7438b00845a0) — USAO - Ohio, Southern · 2026-05-15

## 🔒 Newly added OFAC sanctions

_No recently dated OFAC entries._

## 💉 FDA Class I recalls (life-threatening)

_No Class I recalls in this window._

## 💰 Largest insider sells (SEC Form 4)

- **TWILIO INC** (TWLO) — $130.6M on 2026-05-12 · 5 insiders
- **CATERPILLAR INC** (CAT) — $14.2M on 2026-05-11 · 1 insider
- **Howmet Aerospace Inc.** (HWM) — $11.3M on 2026-05-11 · 1 insider
- **FIRST CITIZENS BANCSHARES INC /DE/** (FCNCP) — $10.3M on 2026-05-12 · 1 insider
- **Sionna Therapeutics, Inc.** (SION) — $8.5M on 2026-05-11 · 1 insider

## Citation

> AI Analytics. Cross-vertical regulatory digest. Retrieved 2026-05-16T06:14:15.626Z from https://api.ai-analytics.org/today. Licensed CC0.

---

*[Full feed](https://api.ai-analytics.org/feed.json) · [Dataset catalog](https://api.ai-analytics.org/datasets/) · [Cross-vertical entity timelines](https://api.ai-analytics.org/entity/) · CC0 1.0*