CVE-2026-26142: Microsoft Nuance Powerscribe 360

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Affected products

• Microsoft Nuance Powerscribe 360: version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …
• Microsoft Nuance Powerscribe One: version 2019.1 only; version 2019.2 only; version 2019.3 only; version 2019.4 only; version 2019.5 only; version 2019.6 only; …

Published 2026-06-09. Last modified 2026-07-23.