CVE-2026-26142

Nuance PowerScribe Remote Code Execution Vulnerability

Published Jun 9, 2026 CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Description
Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Microsoft powerscribe One Version 2023.1 Sp2
Microsoft powerscribe One Version 2023.1 Sp3
Vendors & Products Microsoft powerscribe One Version 2023.1 Sp2
Microsoft powerscribe One Version 2023.1 Sp3
Type Values Removed Values Added
Description Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.
Title Nuance PowerScribe Remote Code Execution Vulnerability
First Time appeared Microsoft
Microsoft nuance Powerscribe 360
Microsoft nuance Powerscribe One
Weaknesses CWE-502
CPEs cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft nuance Powerscribe 360
Microsoft nuance Powerscribe One
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Nov 10, 2026, 11:24 PM
Reserved
Feb 11, 2026, 4:24 PM
Status
Analyzed
Published
Jun 9, 2026, 5:17 PM
Modified
Jul 23, 2026, 8:10 AM