CVE-2026-32717 AnythingLLM access control bypass: suspended users can continue using Browser Extension API keys

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, in multi-user mode, AnythingLLM blocks suspended users on the normal JWT-backed session path, but it does not block them on the browser extension API...

EUVD-2026-12176

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, in multi-user mode, AnythingLLM blocks suspended users on the normal JWT-backed session path, but it does not block them on the browser extension API...

Unauthorized access vulnerability exists in the touch screen version of the cloud platform of VR Visualization Intelligent Interactive Teaching of One100

Phoenix Chuangyi software development teaching and training software, providing vivid image of three-dimensional interactive teaching, for the construction of high-quality professional schools, innovative teaching mode and teaching content to provide a powerful support platform. Chuangyi 100VR...