The Plumb Line

24 hours ending 2026-05-14T12:00:00 UTC

Latvia's prime minister resigned this morning. Iraq's parliament confirmed a new prime minister. A Cisco authentication bypass earned a federal patch-now order. And LandSpace put a Chinese rocket into polar orbit before dawn. These are not obviously related events — but they share a structure: authority changing hands, either by resignation, confirmation, exploit, or launch.

Evika Siliņa's fall is the most politically instructive item in today's data. She lost her Saeima majority over her government's handling of Ukrainian drone incursions into Latvian airspace — a NATO member ousted, in part, because a war being fought 800 kilometers away kept crossing her border at altitude. The episode is a preview of how the Ukraine conflict will continue to destabilize European domestic politics even if the front line never moves. In Baghdad, meanwhile, parliament approved Ali al-Zaidi as the new prime minister, replacing Muhammad Shia al-Sudani. Transition details are sparse, but the timing — as the 2026 Iran war Wikipedia entry remains actively updated — is not trivial.

Netanyahu announced Israel plans to sue the *New York Times* over a Nicholas Kristof column discussing sexual and gender-based violence against Palestinians. Separately, Bolivian police clashed with miners marching on Plaza Murillo in La Paz, some demanding the sitting president's resignation. And five Italian tourists were found dead after a dive at Alimathaa in Vaavu Atoll, Maldives — cause under investigation.

The Cisco Hole You Have Four Days to Close

CISA added CVE-2026-20182 to its Known Exploited Vulnerabilities catalog this morning: an authentication bypass in the Cisco Catalyst SD-WAN Controller, with a patch deadline of May 17. Federal agencies are legally required to remediate by Sunday. Everyone else should treat that deadline as a strong suggestion. SD-WAN controllers are the choke point for wide-area network traffic — an authentication bypass there is not a nuisance vulnerability, it's a skeleton key.

The ICS advisory volume from CISA today is striking on its own terms: fifteen separate advisories, fourteen of them covering Siemens products — Ruggedcom ROX (four advisories), SIMATIC (two), SIPROTEC 5, Solid Edge, Teamcenter, SENTRON, gWAP, Siemens ROS#, and the SIMATIC S7 PLC Web Server. The fifteenth covers Universal Robots Polyscope 5. If you run Siemens industrial infrastructure, today was not a day to leave your patch queue unattended.

The Federal Checkbook, Open to a Familiar Page

The largest single federal contract action visible in today's USASpending data: $133 million to Oracle Health Government Services from the Department of Veterans Affairs, an option exercise on a computer systems design contract. Second largest: $37 million to Fox-ESA JV LLC for VA construction. Caltech received $23 million from NASA for physical sciences R&D. NaphCare LLC received $19.1 million from the Bureau of Prisons for hospital services. Amergis Healthcare Staffing pulled $16.8 million from ICE for ambulatory health services.

The EPA, in a rare reversal, *clawed back* $8.99 million from Eastern Research Group for environmental consulting — a negative modification worth noting given the current regulatory climate. Perimeter Solutions LP received $13 million from the Bureau of Land Management for fire retardant chemicals, a line item that will look prescient if the western fire season arrives early.

The NIH side of the ledger is dominated by translational science and Alzheimer's research: USC's clinical translational institute received $9.1 million, Columbia's Alzheimer's Disease Research Center got $4.75 million, and UAB's Alzheimer's center drew $4.27 million and a separate $1.37 million core grant. Seattle Children's Hospital received $6.75 million from NIDA for somatic mosaicism genomics work.

Rocket, Drone, Earthquake, Asteroid

LandSpace successfully launched the Zhuque-2E Block 2 — a mass simulator payload — into polar orbit from Jiuquan at 03:00 UTC. The rocket's upper stage is now cataloged in celestrak as debris object 69096. Polar orbit insertion matters for reconnaissance and Earth-observation applications; the mass simulator mission validates the vehicle before operational payloads fly.

The seismic picture is routine but geographically broad: an M5.3 struck 51 km northeast of Namuac in the Philippines at 22:01 UTC Tuesday, followed nine minutes later by an M4.6 in the same vicinity — likely aftershock or sequence activity. Costa Rica saw an M4.9 near Jacó and a follow-on M4.4 in the same zone twelve hours later. Iran registered an M4.7 near Bardsīr. No tsunami alerts, no USGS impact assessments. Asteroid 375103 (2007 TD71) — classified potentially hazardous, up to 1,186 meters in diameter — made its closest approach at 34 lunar distances Tuesday evening. That's well outside any concern threshold, but the object is large enough that it gets logged.

The Death Notice That Matters

A Trans Aero MedEvac plane lost radio contact and crashed near Ruidoso, New Mexico, killing all four people aboard. The aircraft was a medical transport — medevac operations run in marginal conditions by design, and the crash is under investigation. Four dead on an aircraft whose purpose was to keep someone else alive.

What We Can't Tell You

1. What triggered Siliņa's majority loss, specifically — the drone-incursion handling explanation is what Wikipedia records, but the internal coalition arithmetic that actually broke is not in the source data.

2. Whether CVE-2026-20182 is being actively exploited in the wild — CISA's KEV addition implies it, but no exploitation incident data is present in this window.

3. Ali al-Zaidi's cabinet composition and alignment — the Iraq parliament vote is confirmed; governing coalition details are absent.

By the Numbers

Today's data carries a Latvian political collapse driven by a Ukrainian drone war, a Baghdad succession, a Cisco skeleton-key vulnerability on a four-day federal clock, fourteen simultaneous Siemens ICS advisories, and a Chinese rocket in polar orbit before most of Europe woke up. The truth score on everything you just read is 1.0 — every claim traces back to a primary record on disk. Patch the Catalyst SD-WAN Controller by Sunday.

— *The Plumb Line*. Sourced from 212 grounded events across 27 source databases.

Sources

Geopolitical & Current Events

• wikipedia_events/2026-05-14_5e853bfff3284eafc6a780eb — Latvia PM Siliņa resignation
• wikipedia_events/2026-05-14_aadc1b7fe2d2065c32d227aa — Iraq PM Ali al-Zaidi confirmed
• wikipedia_events/2026-05-14_56a5c494c36827991fb67428 — Netanyahu / NYT lawsuit announcement
• wikipedia_events/2026-05-14_ac013fa378f538eddc4cce04 — Bolivia miner protests, La Paz
• wikipedia_events/2026-05-14_b1cb2b93199e29929bc53248 — Five Italian tourists dead, Maldives
• wikipedia_events/2026-05-14_df7c78cda90619fadca457b1 — Trans Aero MedEvac crash, Ruidoso NM
• wikipedia_events/2026-05-14_461be0aad052f2a488c3c074 — West Sumatra landslide, 9 killed

Cybersecurity

• cisa_kev/CVE-2026-20182 — Cisco Catalyst SD-WAN authentication bypass, due 2026-05-17
• cisa_advisories/node/24867–24883 — 15 ICS advisories (Siemens x14, Universal Robots x1)

Federal Contracts & Spending

• usaspending/279969319 — $133.4M Oracle Health ← VA
• usaspending/357866240 — $37M Fox-ESA JV ← VA construction
• usaspending/357872306 — $23M Caltech ← NASA R&D
• usaspending/278195872 — $19.1M NaphCare ← Bureau of Prisons
• usaspending/291255397 — $14.3M Johnson Security Bureau ← TSA
• usaspending/357865002 — $13M Perimeter Solutions ← BLM (fire retardant)
• usaspending/291013268 — −$8.99M Eastern Research Group ← EPA (clawback)

Space & Launch

• launch_library/4aa02420-1bcb-4dd9-afa8-06d5ff89d248 — Zhuque-2E Block 2 launch, successful
• celestrak/69096 — Zhuque-2E R/B debris cataloged
• nasa_neo/2375103__2026-05-13T19:49:00+00:00 — Asteroid 375103 (2007 TD71) flyby

Seismic

• usgs_earthquakes/us6000sxk1 — M5.3 Philippines
• usgs_earthquakes/us6000sxh5 — M4.9 Costa Rica
• usgs_earthquakes/us6000sxm9 — M4.7 Iran