Jun 2026: Nuance PowerScribe Remote Code Execution Vulnerability
CVE-2026-26142 Published on June 9, 2026

Nuance PowerScribe Remote Code Execution Vulnerability
Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Vendor Advisory NVD

Weakness Type

What is a Marshaling, Unmarshaling Vulnerability?

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

CVE-2026-26142 has been classified to as a Marshaling, Unmarshaling vulnerability or weakness.


Products Associated with CVE-2026-26142

stack.watch emails you whenever new vulnerabilities are published in Microsoft Nuance Powerscribe 360 or Microsoft Nuance Powerscribe One. Just hit a watch button to start following.

 
 

Affected Versions

Microsoft Nuance PowerScribe 360 4.0: Microsoft Nuance PowerScribe 360 version 4.0.1: Microsoft Nuance PowerScribe 360 version 4.0.2: Microsoft Nuance PowerScribe 360 version 4.0.3: Microsoft Nuance PowerScribe 360 version 4.0.4: Microsoft Nuance PowerScribe 360 version 4.0.5: Microsoft Nuance PowerScribe 360 version 4.0.6: Microsoft Nuance PowerScribe 360 version 4.0.7: Microsoft Nuance PowerScribe 360 version 4.0.8: Microsoft Nuance PowerScribe 360 version 4.0.9: Microsoft Nuance PowerScribe One version 2019.1: Microsoft Nuance PowerScribe One version 2019.10: Microsoft Nuance PowerScribe One version 2019.2: Microsoft Nuance PowerScribe One version 2019.3: Microsoft Nuance PowerScribe One version 2019.4: Microsoft Nuance PowerScribe One version 2019.5: Microsoft Nuance PowerScribe One version 2019.6: Microsoft Nuance PowerScribe One version 2019.7: Microsoft Nuance PowerScribe One version 2019.8: Microsoft Nuance PowerScribe One version 2019.9: Microsoft PowerScribe One version 2023.1 SP2 Patch 11: Microsoft PowerScribe One version 2023.1 SP3 Patch 6: