CVE-2026-26142

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.0:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.1:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.2:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.3:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.4:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.5:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.6:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.7:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.8:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.9:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.1:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.2:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.3:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.4:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.5:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.6:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.7:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.8:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.9:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.10:::::::*
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp2_patch_11::::::
	cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp3_patch_6::::::

History

No history.

Information

Published : 2026-06-09 17:17

Updated : 2026-07-23 08:10

NVD link : CVE-2026-26142

Mitre link : CVE-2026-26142

CVE.ORG link : CVE-2026-26142

JSON object : View

Products Affected

microsoft

nuance_powerscribe_360
nuance_powerscribe_one

CWE

CWE-502

Deserialization of Untrusted Data

{"id": "CVE-2026-26142", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-26142", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-10T14:25:12.399806Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "secure@microsoft.com", "affectedData": [{"vendor": "Microsoft", "product": "Nuance PowerScribe 360 4.0", "versions": [{"status": "affected", "version": "4.0", "lessThan": "7.0.11.49", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.1", "versions": [{"status": "affected", "version": "4.0.1", "lessThan": "7.0.111.68", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.2", "versions": [{"status": "affected", "version": "4.0.2", "lessThan": "7.0.154.18", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.3", "versions": [{"status": "affected", "version": "4.0.3", "lessThan": "7.0.197.10", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.4", "versions": [{"status": "affected", "version": "4.0.4", "lessThan": "7.0.212.10", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.5", "versions": [{"status": "affected", "version": "4.0.5", "lessThan": "7.0.243.19", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.6", "versions": [{"status": "affected", "version": "4.0.6", "lessThan": "7.0.277.28", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.7", "versions": [{"status": "affected", "version": "4.0.7", "lessThan": "7.0.316.12", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.8", "versions": [{"status": "affected", "version": "4.0.8", "lessThan": "7.0.427.15", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe 360 version 4.0.9", "versions": [{"status": "affected", "version": "4.0.9", "lessThan": "7.0.528.24", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.1", "versions": [{"status": "affected", "version": "2019.1", "lessThan": "2019.1.96.6", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.10", "versions": [{"status": "affected", "version": "2019.10", "lessThan": "2019.10.36.14", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.2", "versions": [{"status": "affected", "version": "2019.2", "lessThan": "2019.2.9.11", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.3", "versions": [{"status": "affected", "version": "2019.3", "lessThan": "2019.3.16.21", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.4", "versions": [{"status": "affected", "version": "2019.4", "lessThan": "2019.4.9.17", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.5", "versions": [{"status": "affected", "version": "2019.5", "lessThan": "2019.5.14.40", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.6", "versions": [{"status": "affected", "version": "2019.6", "lessThan": "2019.6.36.40", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.7", "versions": [{"status": "affected", "version": "2019.7", "lessThan": "2019.7.107.26", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.8", "versions": [{"status": "affected", "version": "2019.8", "lessThan": "2019.8.43.19", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "Nuance PowerScribe One version 2019.9", "versions": [{"status": "affected", "version": "2019.9", "lessThan": "2019.9.31.23", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "PowerScribe One version 2023.1 SP2 Patch 11", "versions": [{"status": "affected", "version": "2023.1", "lessThan": "2023.2.3054", "versionType": "custom"}]}, {"vendor": "Microsoft", "product": "PowerScribe One version 2023.1 SP3 Patch 6", "versions": [{"status": "affected", "version": "2023.1", "lessThan": "2023.3.9072", "versionType": "custom"}]}]}], "published": "2026-06-09T17:17:03.087", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network."}, {"lang": "es", "value": "La deserializaci\u00f3n de datos no confiables en Nuance PowerScribe permite a un atacante no autorizado ejecutar c\u00f3digo a trav\u00e9s de una red."}], "lastModified": "2026-07-23T08:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4505FF36-5D27-40BD-9BB1-F426E1F22108"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A11285B4-4EC6-4BF1-8A1B-47FF97C4FDB6"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "338738D0-96CD-408B-B782-1C5BA01B3753"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B5C5313-39F8-4C4C-A789-E64F2AD7D150"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5E14BBD-F77C-4946-A4C9-143E47299977"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CF04E38-FD09-4B6B-B5CF-F0F49982CF1C"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "463A6A94-C936-44B4-B4B6-6C88A93F1D37"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98EC89A0-23EE-4638-A2C3-4C4D917DA9EE"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67F8EF7B-FE3C-42FE-A00B-40E7CFCDA961"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5B27622-02CA-4374-91B8-52BED59F92EF"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62329468-E85C-4A3C-A0BF-8BA11941DED5"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EDC600D-8637-4BAB-AC7D-A9D95B03DAB9"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47AC5A9D-8016-4BDB-9D8F-098CFD93855A"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B6B794A-C467-411D-9468-A7ADDA7D6157"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "870B35F1-75F2-4EBB-A4C5-F6C3118BBC25"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "548FC39C-8C08-4285-A5FC-0785738C4471"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F44CAAE-A020-4F81-BF96-48F9D6559A7D"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA71CDB3-269C-4EE8-9F46-FD7CC1284B9C"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F374C80B-0336-4687-879B-1745234B9E37"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "682143B4-04BA-4C11-AAE8-E687B6BE4688"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp2_patch_11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75FC9AE7-A491-4C3C-8D23-5E11F0F14265"}, {"criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp3_patch_6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD88F6EF-23D2-41FF-A1BC-0EEB19CE17FB"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}