This vulnerability (CVE-2026-26142) in Nuance PowerScribe 360 4.0 is caused by unsafe deserialization of untrusted data, classified under CWE-502. Exploitation enables remote code execution by an unauthenticated attacker over the network. The vulnerability is rated critical with a CVSS 3.1 base score of 9.8, reflecting its ease of exploitation and severe impact. Microsoft has published an official fix for this vulnerability, and users are advised to apply the patch promptly.

Successful exploitation allows an attacker to execute arbitrary code remotely without authentication, leading to complete compromise of the affected system's confidentiality, integrity, and availability. This can result in full system takeover, data theft, or disruption of service.

An official patch is available from Microsoft for Nuance PowerScribe 360 version 4.0. Users should apply the update as soon as possible to remediate this vulnerability. Refer to the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142 for detailed patching instructions.