---
id: CVE-2026-26142
title: >-
  Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized
  attacker to execute code over a network.
summary: >-
  Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized
  attacker to execute code over a network.
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-502
vendor: microsoft
product: nuance_powerscribe_360
affected:
  - nuance_powerscribe_360 = 4.0.0
  - nuance_powerscribe_360 = 4.0.1
  - nuance_powerscribe_360 = 4.0.2
  - nuance_powerscribe_360 = 4.0.3
  - nuance_powerscribe_360 = 4.0.4
  - nuance_powerscribe_360 = 4.0.5
  - nuance_powerscribe_360 = 4.0.6
  - nuance_powerscribe_360 = 4.0.7
  - nuance_powerscribe_360 = 4.0.8
  - nuance_powerscribe_360 = 4.0.9
  - nuance_powerscribe_one = 2019.1
  - nuance_powerscribe_one = 2019.2
  - nuance_powerscribe_one = 2019.3
  - nuance_powerscribe_one = 2019.4
  - nuance_powerscribe_one = 2019.5
  - nuance_powerscribe_one = 2019.6
  - nuance_powerscribe_one = 2019.7
  - nuance_powerscribe_one = 2019.8
  - nuance_powerscribe_one = 2019.9
  - nuance_powerscribe_one = 2019.10
  - nuance_powerscribe_one = 2023.1
published: '2026-06-09'
updated: '2026-06-29'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-26142'
references:
  - url: 'https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142'
    label: secure@microsoft.com
tags:
  - nvd
  - cve.org
epss: 0.01532
epssPercentile: 0.73707
ingestedAt: '2026-06-29T15:48:27.671Z'
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-06-10T14:25:12.399806Z'
---

## Overview

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

## Affected

- `nuance_powerscribe_360 = 4.0.0`
- `nuance_powerscribe_360 = 4.0.1`
- `nuance_powerscribe_360 = 4.0.2`
- `nuance_powerscribe_360 = 4.0.3`
- `nuance_powerscribe_360 = 4.0.4`
- `nuance_powerscribe_360 = 4.0.5`
- `nuance_powerscribe_360 = 4.0.6`
- `nuance_powerscribe_360 = 4.0.7`
- `nuance_powerscribe_360 = 4.0.8`
- `nuance_powerscribe_360 = 4.0.9`
- `nuance_powerscribe_one = 2019.1`
- `nuance_powerscribe_one = 2019.2`
- `nuance_powerscribe_one = 2019.3`
- `nuance_powerscribe_one = 2019.4`
- `nuance_powerscribe_one = 2019.5`
- `nuance_powerscribe_one = 2019.6`
- `nuance_powerscribe_one = 2019.7`
- `nuance_powerscribe_one = 2019.8`
- `nuance_powerscribe_one = 2019.9`
- `nuance_powerscribe_one = 2019.10`
- `nuance_powerscribe_one = 2023.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.