CVE-2026-26142

Nuance PowerScribe Remote Code Execution Vulnerability

State: Published
Severity: 9.8 Critical
Published: Jun 9, 2026
Updated: Sep 24, 2026
Reserved: Feb 11, 2026

Description

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	microsoft

Weaknesses

CWE-502 Deserialization of Untrusted Data

Affected Products

Product	Versions
Nuance PowerScribe 360 4.0Microsoft	4.0 to before 7.0.11.49Affected
Nuance PowerScribe 360 version 4.0.1Microsoft	4.0.1 to before 7.0.111.68Affected
Nuance PowerScribe 360 version 4.0.2Microsoft	4.0.2 to before 7.0.154.18Affected
Nuance PowerScribe 360 version 4.0.3Microsoft	4.0.3 to before 7.0.197.10Affected
Nuance PowerScribe 360 version 4.0.4Microsoft	4.0.4 to before 7.0.212.10Affected
Nuance PowerScribe 360 version 4.0.5Microsoft	4.0.5 to before 7.0.243.19Affected
Nuance PowerScribe 360 version 4.0.6Microsoft	4.0.6 to before 7.0.277.28Affected
Nuance PowerScribe 360 version 4.0.7Microsoft	4.0.7 to before 7.0.316.12Affected
Nuance PowerScribe 360 version 4.0.8Microsoft	4.0.8 to before 7.0.427.15Affected
Nuance PowerScribe 360 version 4.0.9Microsoft	4.0.9 to before 7.0.528.24Affected
Nuance PowerScribe One version 2019.1Microsoft	2019.1 to before 2019.1.96.6Affected
Nuance PowerScribe One version 2019.10Microsoft	2019.10 to before 2019.10.36.14Affected
Nuance PowerScribe One version 2019.2Microsoft	2019.2 to before 2019.2.9.11Affected
Nuance PowerScribe One version 2019.3Microsoft	2019.3 to before 2019.3.16.21Affected
Nuance PowerScribe One version 2019.4Microsoft	2019.4 to before 2019.4.9.17Affected
Nuance PowerScribe One version 2019.5Microsoft	2019.5 to before 2019.5.14.40Affected
Nuance PowerScribe One version 2019.6Microsoft	2019.6 to before 2019.6.36.40Affected
Nuance PowerScribe One version 2019.7Microsoft	2019.7 to before 2019.7.107.26Affected
Nuance PowerScribe One version 2019.8Microsoft	2019.8 to before 2019.8.43.19Affected
Nuance PowerScribe One version 2019.9Microsoft	2019.9 to before 2019.9.31.23Affected
PowerScribe One version 2023.1 SP2 Patch 11Microsoft	2023.1 to before 2023.2.3054Affected
PowerScribe One version 2023.1 SP3 Patch 6Microsoft	2023.1 to before 2023.3.9072Affected

References

Nuance PowerScribe Remote Code Execution Vulnerabilityvendor-advisorypatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.