CVE-2026-26142Disclosure(microsoft / nuance_powerscribe_360)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft nuance_powerscribe_360 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • nuance_powerscribe_360
  • nuance_powerscribe_one

Threat summary

  • Patch or workaround signal is available
  • 6 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 6 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 3d ago at 2 mentions (2026-06-09); latest day: 1
  • 6 total mentions across 4 days

Affected systems

Vendors
Products
nuance_powerscribe_360nuance_powerscribe_one

21 versions affected across 2 products

Deep dive

Activity timeline6 mentions / 4d
01122Mentions · 2026-06-09: 2Mentions · 2026-06-10: 2Mentions · 2026-06-29: 1Mentions · 2026-07-07: 1Patch / Workaround · 2026-06-09: 2Patch / Workaround · 2026-06-29: 1Technical Details · 2026-06-09: 2Technical Details · 2026-06-10: 2Technical Details · 2026-06-29: 1Technical Details · 2026-07-07: 106-0906-1006-2907-07
Signal classification3 categories
Disclosure
350.0%
Patch
233.3%
General
116.7%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-092
Patch2
2026-06-102
Disclosure2
2026-06-291
Disclosure1
2026-07-071
General1
Full discourse6 posts
  • kawn@kawn2020
    Disclosure

    #windowsupdate #microsoft つづき ・CVE-2026-47655 6.5 Microsoft Graph ・CVE-2026-48567 10  Azure HorizonDB ・CVE-2026-48579 9.1 Microsoft Exchange Online -CVSS 基本値が 9.8 以上のもの:6 件 ・CVE-2026-26142 9.8 Nuance PowerScribe つづく…

    Post summary

    A brief bulletin listing several new CVEs with associated product names and CVSS scores, but without any mention of PoC, exploitation, or remediation.

    1000085
    85 followersView on X
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-26142 — CVSS 9.8/10 ██████████ Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/Z0gK8sFfvh

    Post summary

    Critical deserialization flaw in Nuance PowerScribe (CVSS 9.8) with a patch available immediately.

    1000075
    59 followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-26142: Nuance PowerScribe Deserialization Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04nLzYC0

    Post summary

    The provided text refers to an article that outlines what the Nuance PowerScribe deserialization vulnerability entails and offers general guidance on how to respond, without specifying PoCs, exploits, or patch details.

    0000033
    31 followersView on X
  • DFIR Lab@DFIR_Lab
    Disclosure

    🚨 CRITICAL: CVE-2026-26142 (CVSS 9.8) - Remote Code Execution via deserialization flaw in Nuance PowerScribe. Unauthenticated attackers can execute code over network. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/4ADB7YKZ9O

    Post summary

    The tweet announces CVE‑2026‑26142, a critical RCE vulnerability in Nuance PowerScribe, urging users to apply the available patch immediately.

    0000047
    54 followersView on X
  • Cyber Threat Observatory | Alan Turing Institute@TuringCyberObs
    Disclosure

    CVE-2026-26142 (Nuance PowerScribe) is a critical deserialization flaw Healthcare impact is high: system compromise, patient-data exposure, and lateral movement. See full analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-06-09/TIER_2_CVE-2026-26142.md #CyberSecurity #HealthcareSecurity #DPI #MedicalDevices #RCE

    Post summary

    A new critical deserialization flaw (CVE-2026-26142) in Nuance PowerScribe has been announced, potentially allowing system compromise and patient data exposure in healthcare settings.

    0000035
    51 followersView on X
  • WindowsForum@windowsforum
    Patch

    🪟 Critical Nuance PowerScribe RCE means “healthcare servers with internet access” are the real attack surface. Microsoft’s advisory tone is calm—your radiology workflow isn’t. Patch ASAP. #Windows #Microsoft #CVE #CyberSecurity https://windowsforum.com/threads/cve-2026-26142-critical-remote-rce-in-nuance-powerscribe-patch-urgently.424423/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #RemoteCodeExecution https://t.co/RLRzQ5Feki

    Post summary

    The post highlights a critical remote code execution flaw in Nuance PowerScribe, emphasizes the real attack surface in healthcare servers, and urges immediate patching.

    0000030
    1.2K followersView on X
CPE platform detail22 entries

22 of 22 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftnuance_powerscribe_3604.0.0--
Appmicrosoftnuance_powerscribe_3604.0.1--
Appmicrosoftnuance_powerscribe_3604.0.2--
Appmicrosoftnuance_powerscribe_3604.0.3--
Appmicrosoftnuance_powerscribe_3604.0.4--
Appmicrosoftnuance_powerscribe_3604.0.5--
Appmicrosoftnuance_powerscribe_3604.0.6--
Appmicrosoftnuance_powerscribe_3604.0.7--
Appmicrosoftnuance_powerscribe_3604.0.8--
Appmicrosoftnuance_powerscribe_3604.0.9--
Appmicrosoftnuance_powerscribe_one2019.1--
Appmicrosoftnuance_powerscribe_one2019.10--
Appmicrosoftnuance_powerscribe_one2019.2--
Appmicrosoftnuance_powerscribe_one2019.3--
Appmicrosoftnuance_powerscribe_one2019.4--
Appmicrosoftnuance_powerscribe_one2019.5--
Appmicrosoftnuance_powerscribe_one2019.6--
Appmicrosoftnuance_powerscribe_one2019.7--
Appmicrosoftnuance_powerscribe_one2019.8--
Appmicrosoftnuance_powerscribe_one2019.9--
Appmicrosoftnuance_powerscribe_one2023.1--
Appmicrosoftnuance_powerscribe_one2023.1--

Explore more