Paper/Archive/CVE-2026-26142

CVE-2026-26142

Microsoft Nuance PowerScribe 360 4.0 — Nuance PowerScribe Remote Code Execution Vulnerability

Description · from the CVE record

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Affected

ProductAffectedFixed inSource

Nuance PowerScribe 360 4.04.0 – < 7.0.11.497.0.11.49CNA

Nuance PowerScribe 360 version 4.0.14.0.1 – < 7.0.111.687.0.111.68CNA

Nuance PowerScribe 360 version 4.0.24.0.2 – < 7.0.154.187.0.154.18CNA

Nuance PowerScribe 360 version 4.0.34.0.3 – < 7.0.197.107.0.197.10CNA

Nuance PowerScribe 360 version 4.0.44.0.4 – < 7.0.212.107.0.212.10CNA

Nuance PowerScribe 360 version 4.0.54.0.5 – < 7.0.243.197.0.243.19CNA

Nuance PowerScribe 360 version 4.0.64.0.6 – < 7.0.277.287.0.277.28CNA

Nuance PowerScribe 360 version 4.0.74.0.7 – < 7.0.316.127.0.316.12CNA

Nuance PowerScribe 360 version 4.0.84.0.8 – < 7.0.427.157.0.427.15CNA

Nuance PowerScribe 360 version 4.0.94.0.9 – < 7.0.528.247.0.528.24CNA

Nuance PowerScribe One version 2019.12019.1 – < 2019.1.96.62019.1.96.6CNA

Nuance PowerScribe One version 2019.102019.10 – < 2019.10.36.142019.10.36.14CNA

microsoft (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total