Microsoft simplechat

• CVE-2026-105798 High 8.7 SimpleChat: Stored XSS via group document filename in inline onclick handler 0.5%
• CVE-2026-105797 High 8.8 SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport) 0.6%
• CVE-2026-57206 High 8.6 SimpleChat plugin validation endpoints missing authentication and authorization 1.0%
• CVE-2026-57205 Medium 4.3 SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpoints 0.9%