What’s Vulnerable › Products

microsoft simplechat vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your microsoft simplechat version is affected

Latest microsoft simplechat vulnerabilities

• CVE-2026-105798 — SimpleChat: Stored XSS via group document filename in inline onclick handler (CVSS 8.7)
• CVE-2026-105797 — SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport) (CVSS 8.8)
• CVE-2026-57206 — SimpleChat plugin validation endpoints missing authentication and authorization (CVSS 8.6)
• CVE-2026-57205 — SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpoints (CVSS 4.3)