Log in Start free

Vulnerability · Published Jun 9, 2026 · Assigned by microsoft

CVE-2026-26142Nuance PowerScribe Remote Code Execution Vulnerability

Critical 9.8

In plain English

A critical-severity unsafe deserialization in Nuance PowerScribe 360 4.0 from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.9%top 20.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Affected products (as reported)

VendorProductVersions
Microsoft Nuance PowerScribe 360 4.0 4.0 – before 7.0.11.49
Microsoft Nuance PowerScribe 360 version 4.0.1 4.0.1 – before 7.0.111.68
Microsoft Nuance PowerScribe 360 version 4.0.2 4.0.2 – before 7.0.154.18
Microsoft Nuance PowerScribe 360 version 4.0.3 4.0.3 – before 7.0.197.10
Microsoft Nuance PowerScribe 360 version 4.0.4 4.0.4 – before 7.0.212.10
Microsoft Nuance PowerScribe 360 version 4.0.5 4.0.5 – before 7.0.243.19
Microsoft Nuance PowerScribe 360 version 4.0.6 4.0.6 – before 7.0.277.28
Microsoft Nuance PowerScribe 360 version 4.0.7 4.0.7 – before 7.0.316.12
Microsoft Nuance PowerScribe 360 version 4.0.8 4.0.8 – before 7.0.427.15
Microsoft Nuance PowerScribe 360 version 4.0.9 4.0.9 – before 7.0.528.24
Microsoft Nuance PowerScribe One version 2019.1 2019.1 – before 2019.1.96.6
Microsoft Nuance PowerScribe One version 2019.10 2019.10 – before 2019.10.36.14
Microsoft Nuance PowerScribe One version 2019.2 2019.2 – before 2019.2.9.11
Microsoft Nuance PowerScribe One version 2019.3 2019.3 – before 2019.3.16.21
Microsoft Nuance PowerScribe One version 2019.4 2019.4 – before 2019.4.9.17
Microsoft Nuance PowerScribe One version 2019.5 2019.5 – before 2019.5.14.40
Microsoft Nuance PowerScribe One version 2019.6 2019.6 – before 2019.6.36.40
Microsoft Nuance PowerScribe One version 2019.7 2019.7 – before 2019.7.107.26
Microsoft Nuance PowerScribe One version 2019.8 2019.8 – before 2019.8.43.19
Microsoft Nuance PowerScribe One version 2019.9 2019.9 – before 2019.9.31.23
Microsoft PowerScribe One version 2023.1 SP2 Patch 11 2023.1 – before 2023.2.3054
Microsoft PowerScribe One version 2023.1 SP3 Patch 6 2023.1 – before 2023.3.9072

Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

References