OnlyFm252
Nuance PowerScribe

CVE-2026-26142 — Nuance PowerScribe Remote Code Execution Vulnerability

Critical CVSS 9.8 EPSS 0.01145 2026-06 archive

Executive Summary

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Overview

9.8
CVSS CRITICAL
Critical
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Remote Code Execution
Weakness CWE-502: Deserialization of Untrusted Data
Released Jun 9 2026
Last Updated Jun 9 2026
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.01145 — 0.62556 percentile
NVD CVSS 9.8 CRITICAL — matches MSRC

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
None
SCOPE
Unchanged
CONFIDENTIALITY
High
INTEGRITY
High
AVAILABILITY
High
EXPLOIT CODE MATURITY
Unproven
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 8.5

EPSS Score

0.01145
probability of exploitation in the next 30 days
0.62556 percentile - updated 2026-06-21
View on FIRST.org

Affected Products

22 affected products
Product KB Article Severity Impact Restart Required
Nuance PowerScribe 360 4.0 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe 360 version 4.0.1 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe 360 version 4.0.2 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe 360 version 4.0.3 Release Notes (Security Update) Critical Remote Code Execution Unknown
Nuance PowerScribe 360 version 4.0.4 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe 360 version 4.0.5 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe 360 version 4.0.6 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe 360 version 4.0.7 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe 360 version 4.0.8 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe 360 version 4.0.9 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.1 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.10 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.2 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.3 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.4 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.5 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.6 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.7 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.8 Release Notes (Security Update) Critical Remote Code Execution Maybe
Nuance PowerScribe One version 2019.9 Release Notes (Security Update) Critical Remote Code Execution Maybe
PowerScribe One version 2023.1 SP2 Patch 11 Release Notes (Security Update) Critical Remote Code Execution Maybe
PowerScribe One version 2023.1 SP3 Patch 6 Release Notes (Security Update) Critical Remote Code Execution Maybe

Patches

1 patch
Article Type Restart
Release Notes Security Update Maybe

Known Exploits

On This Page