Critical MSRC-CVE-2026-26142 1 CVE

Nuance PowerScribe Remote Code Execution Vulnerability

Published Jun 9, 2026 · Updated Jun 9, 2026

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
7.0.243.19 — https://nuance.my.site.com/NuanceHealthcareSupport/s/login/?ec=302&startURL=%2FNuanceHealthcareSupport%2Fs%2Farticle%2FPowerScribe-360-Reporting-Release-Notes-for-Version-4-x
2019.1.96.6 — https://nuance.my.site.com/NuanceHealthcareSupport/s/article/PowerScribe-One-2019-Release-Notes
7.0.11.49 — https://nuance.my.site.com/NuanceHealthcareSupport/s/article/PowerScribe-360-Reporting-Release-Notes-for-Version-4-x
2023.2.3054 — https://nuance.my.site.com/NuanceHealthcareSupport/s/article/PowerScribe-One-Release-Notes

Vulnerabilities 1

Critical 9.8

CVE-2026-26142

Nuance PowerScribe Remote Code Execution Vulnerability

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Microsoft Nuance PowerScribe One version 2019.3 Nuance PowerScribe 360 version 4.0.6 Nuance PowerScribe One version 2019.5

Jun 9, 2026

Revision history

2026-06-09 #1
Information published.

References

CVE-2026-26142 Nuance PowerScribe Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss