Vulnerability-Lookup

BDU:2026-08118 (CVE-2026-26142)

Vulnerability from fstec – Published: 2026-06-11 – Updated: 2026-07-21 – View on bdu.fstec.ru Fixed

Title

Уязвимость профессиональной медицинской платформы распознавания речи и автоматизации документооборота Nuance PowerScribe, связанная с целочисленной потерей значимости, позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость профессиональной медицинской платформы распознавания речи и автоматизации документооборота Nuance PowerScribe связана с недостатком механизма диссерилизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код

Severity

10.0 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 (Critical) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-502 - Восстановление в памяти недостоверных данных

Aliases

CVE-2026-26142

References

1 reference

URL
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142

Impacted products

4 products from 1 vendor

Vendors

Microsoft Corp

Products

PowerScribe One version 2023.1 SP3 Patch 6, PowerScribe One version 2023.1 SP2 Patch 11, Nuance PowerScribe One, Nuance PowerScribe 360

Versions

до 2023.3.9072 (PowerScribe One version 2023.1 SP3 Patch 6), до 2023.2.3054 (PowerScribe One version 2023.1 SP2 Patch 11), от 2019.10 до 2019.10.36.14 (Nuance PowerScribe One), от 2019.9 до 2019.9.31.23 (Nuance PowerScribe One), от 2019.8 до 2019.8.43.19 (Nuance PowerScribe One), от 2019.7 до 2019.7.107.26 (Nuance PowerScribe One), от 2019.6 до 2019.6.36.40 (Nuance PowerScribe One), от 2019.5 до 2019.5.14.40 (Nuance PowerScribe One), от 2019.4 до 2019.4.9.17 (Nuance PowerScribe One), от 2019.3 до 2019.3.16.21 (Nuance PowerScribe One), от 2019.2 до 2019.2.9.11 (Nuance PowerScribe One), от 2019.1 до 2019.1.96.6 (Nuance PowerScribe One), от 4.0.4 до 7.0.212.10 (Nuance PowerScribe 360), от 4.0.3 до 7.0.197.10 (Nuance PowerScribe 360), от 4.0.2 до 7.0.154.18 (Nuance PowerScribe 360), от 4.0.1 до 7.0.111.68 (Nuance PowerScribe 360), от 4.0 до 7.0.11.49 (Nuance PowerScribe 360), от 4.0.9 до 7.0.528.24 (Nuance PowerScribe 360), от 4.0.8 до 7.0.427.15 (Nuance PowerScribe 360), от 4.0.7 до 7.0.316.12 (Nuance PowerScribe 360), от 4.0.6 до 7.0.277.28 (Nuance PowerScribe 360), от 4.0.5 до 7.0.243.19 (Nuance PowerScribe 360)

Product types

Application software

Mitigations

Использование рекомендаций: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 2023.3.9072 (PowerScribe One version 2023.1 SP3 Patch 6), \u0434\u043e 2023.2.3054 (PowerScribe One version 2023.1 SP2 Patch 11), \u043e\u0442 2019.10 \u0434\u043e 2019.10.36.14 (Nuance PowerScribe One), \u043e\u0442 2019.9 \u0434\u043e 2019.9.31.23 (Nuance PowerScribe One), \u043e\u0442 2019.8 \u0434\u043e 2019.8.43.19 (Nuance PowerScribe One), \u043e\u0442 2019.7 \u0434\u043e 2019.7.107.26 (Nuance PowerScribe One), \u043e\u0442 2019.6 \u0434\u043e 2019.6.36.40 (Nuance PowerScribe One), \u043e\u0442 2019.5 \u0434\u043e 2019.5.14.40 (Nuance PowerScribe One), \u043e\u0442 2019.4 \u0434\u043e 2019.4.9.17 (Nuance PowerScribe One), \u043e\u0442 2019.3 \u0434\u043e 2019.3.16.21 (Nuance PowerScribe One), \u043e\u0442 2019.2 \u0434\u043e 2019.2.9.11 (Nuance PowerScribe One), \u043e\u0442 2019.1 \u0434\u043e 2019.1.96.6 (Nuance PowerScribe One), \u043e\u0442 4.0.4 \u0434\u043e 7.0.212.10 (Nuance PowerScribe 360), \u043e\u0442 4.0.3 \u0434\u043e 7.0.197.10 (Nuance PowerScribe 360), \u043e\u0442 4.0.2 \u0434\u043e 7.0.154.18 (Nuance PowerScribe 360), \u043e\u0442 4.0.1 \u0434\u043e 7.0.111.68 (Nuance PowerScribe 360), \u043e\u0442 4.0 \u0434\u043e 7.0.11.49 (Nuance PowerScribe 360), \u043e\u0442 4.0.9 \u0434\u043e 7.0.528.24 (Nuance PowerScribe 360), \u043e\u0442 4.0.8 \u0434\u043e 7.0.427.15 (Nuance PowerScribe 360), \u043e\u0442 4.0.7 \u0434\u043e 7.0.316.12 (Nuance PowerScribe 360), \u043e\u0442 4.0.6 \u0434\u043e 7.0.277.28 (Nuance PowerScribe 360), \u043e\u0442 4.0.5 \u0434\u043e 7.0.243.19 (Nuance PowerScribe 360)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.06.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "21.07.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "11.06.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-08118",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-26142",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "PowerScribe One version 2023.1 SP3 Patch 6, PowerScribe One version 2023.1 SP2 Patch 11, Nuance PowerScribe One, Nuance PowerScribe 360",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0447\u0438 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043e\u0431\u043e\u0440\u043e\u0442\u0430 Nuance PowerScribe, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0442\u0435\u0440\u0435\u0439 \u0437\u043d\u0430\u0447\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-502)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0447\u0438 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043e\u0431\u043e\u0440\u043e\u0442\u0430 Nuance PowerScribe \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0438\u0441\u0441\u0435\u0440\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-502",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,8)"
}

CVE-2026-26142 (GCVE-0-2026-26142)

Vulnerability from cvelistv5 – Published: 2026-06-09 17:05 – Updated: 2026-08-25 22:43

Title

Nuance PowerScribe Remote Code Execution Vulnerability

Summary

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-10 14:25 UTC

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

microsoft mitre root

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

22 products

Vendor	Product	Version
Microsoft	Nuance PowerScribe 360 4.0	Affected: 4.0 , < 7.0.11.49 (custom)
Microsoft	Nuance PowerScribe 360 version 4.0.1	Affected: 4.0.1 , < 7.0.111.68 (custom)
Microsoft	Nuance PowerScribe 360 version 4.0.2	Affected: 4.0.2 , < 7.0.154.18 (custom)
Microsoft	Nuance PowerScribe 360 version 4.0.3	Affected: 4.0.3 , < 7.0.197.10 (custom)
Microsoft	Nuance PowerScribe 360 version 4.0.4	Affected: 4.0.4 , < 7.0.212.10 (custom)
Microsoft	Nuance PowerScribe 360 version 4.0.5	Affected: 4.0.5 , < 7.0.243.19 (custom)
Microsoft	Nuance PowerScribe 360 version 4.0.6	Affected: 4.0.6 , < 7.0.277.28 (custom)
Microsoft	Nuance PowerScribe 360 version 4.0.7	Affected: 4.0.7 , < 7.0.316.12 (custom)
Microsoft	Nuance PowerScribe 360 version 4.0.8	Affected: 4.0.8 , < 7.0.427.15 (custom)
Microsoft	Nuance PowerScribe 360 version 4.0.9	Affected: 4.0.9 , < 7.0.528.24 (custom)
Microsoft	Nuance PowerScribe One version 2019.1	Affected: 2019.1 , < 2019.1.96.6 (custom)
Microsoft	Nuance PowerScribe One version 2019.10	Affected: 2019.10 , < 2019.10.36.14 (custom)
Microsoft	Nuance PowerScribe One version 2019.2	Affected: 2019.2 , < 2019.2.9.11 (custom)
Microsoft	Nuance PowerScribe One version 2019.3	Affected: 2019.3 , < 2019.3.16.21 (custom)
Microsoft	Nuance PowerScribe One version 2019.4	Affected: 2019.4 , < 2019.4.9.17 (custom)
Microsoft	Nuance PowerScribe One version 2019.5	Affected: 2019.5 , < 2019.5.14.40 (custom)
Microsoft	Nuance PowerScribe One version 2019.6	Affected: 2019.6 , < 2019.6.36.40 (custom)
Microsoft	Nuance PowerScribe One version 2019.7	Affected: 2019.7 , < 2019.7.107.26 (custom)
Microsoft	Nuance PowerScribe One version 2019.8	Affected: 2019.8 , < 2019.8.43.19 (custom)
Microsoft	Nuance PowerScribe One version 2019.9	Affected: 2019.9 , < 2019.9.31.23 (custom)
Microsoft	PowerScribe One version 2023.1 SP2 Patch 11	Affected: 2023.1 , < 2023.2.3054 (custom)
Microsoft	PowerScribe One version 2023.1 SP3 Patch 6	Affected: 2023.1 , < 2023.3.9072 (custom)

Date Public

2026-06-09 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-26142",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-10T14:25:12.399806Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-10T14:31:57.026Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Nuance PowerScribe 360 4.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.11.49",
              "status": "affected",
              "version": "4.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe 360 version 4.0.1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.111.68",
              "status": "affected",
              "version": "4.0.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe 360 version 4.0.2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.154.18",
              "status": "affected",
              "version": "4.0.2",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe 360 version 4.0.3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.197.10",
              "status": "affected",
              "version": "4.0.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe 360 version 4.0.4",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.212.10",
              "status": "affected",
              "version": "4.0.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe 360 version 4.0.5",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.243.19",
              "status": "affected",
              "version": "4.0.5",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe 360 version 4.0.6",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.277.28",
              "status": "affected",
              "version": "4.0.6",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe 360 version 4.0.7",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.316.12",
              "status": "affected",
              "version": "4.0.7",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe 360 version 4.0.8",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.427.15",
              "status": "affected",
              "version": "4.0.8",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe 360 version 4.0.9",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.0.528.24",
              "status": "affected",
              "version": "4.0.9",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.1.96.6",
              "status": "affected",
              "version": "2019.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.10",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.10.36.14",
              "status": "affected",
              "version": "2019.10",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.2.9.11",
              "status": "affected",
              "version": "2019.2",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.3",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.3.16.21",
              "status": "affected",
              "version": "2019.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.4",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.4.9.17",
              "status": "affected",
              "version": "2019.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.5",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.5.14.40",
              "status": "affected",
              "version": "2019.5",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.6",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.6.36.40",
              "status": "affected",
              "version": "2019.6",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.7",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.7.107.26",
              "status": "affected",
              "version": "2019.7",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.8",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.8.43.19",
              "status": "affected",
              "version": "2019.8",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Nuance PowerScribe One version 2019.9",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2019.9.31.23",
              "status": "affected",
              "version": "2019.9",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "PowerScribe One version 2023.1 SP2 Patch 11",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2023.2.3054",
              "status": "affected",
              "version": "2023.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "PowerScribe One version 2023.1 SP3 Patch 6",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "2023.3.9072",
              "status": "affected",
              "version": "2023.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.243.19",
                  "versionStartIncluding": "4.0.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.277.28",
                  "versionStartIncluding": "4.0.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.316.12",
                  "versionStartIncluding": "4.0.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.427.15",
                  "versionStartIncluding": "4.0.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.528.24",
                  "versionStartIncluding": "4.0.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.1.96.6",
                  "versionStartIncluding": "2019.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.2.9.11",
                  "versionStartIncluding": "2019.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.3.16.21",
                  "versionStartIncluding": "2019.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.11.49",
                  "versionStartIncluding": "4.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.111.68",
                  "versionStartIncluding": "4.0.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.154.18",
                  "versionStartIncluding": "4.0.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.197.10",
                  "versionStartIncluding": "4.0.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_360:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.212.10",
                  "versionStartIncluding": "4.0.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.4.9.17",
                  "versionStartIncluding": "2019.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.5.14.40",
                  "versionStartIncluding": "2019.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.6.36.40",
                  "versionStartIncluding": "2019.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.7.107.26",
                  "versionStartIncluding": "2019.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.8.43.19",
                  "versionStartIncluding": "2019.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.9.31.23",
                  "versionStartIncluding": "2019.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2019.10.36.14",
                  "versionStartIncluding": "2019.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2023.2.3054",
                  "versionStartIncluding": "2023.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:nuance_powerscribe_one:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2023.3.9072",
                  "versionStartIncluding": "2023.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-06-09T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T22:43:39.604Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Nuance PowerScribe Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142"
        }
      ],
      "title": "Nuance PowerScribe Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-26142",
    "datePublished": "2026-06-09T17:05:17.903Z",
    "dateReserved": "2026-02-11T16:24:51.134Z",
    "dateUpdated": "2026-08-25T22:43:39.604Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.