Nuance incident

Security update: PHP Security vulnerabilities (CVE-2026-109618 and CVE-2026-109619)

Resolved after 6 days 23 hours, affecting DAX Copilot Mobile - Login (US-01) and DAX Copilot for DMO - Login (US-01) and 1 more, on October 23, 2026.

monitoring Oct 23, 2026, 07:54 PM UTC

We are continuing to monitor for any further issues.

Started: Oct 23, 2026, 07:01 PM UTC
Resolved: Oct 30, 2026, 06:12 PM UTC
Duration: 6d 23h
Detected by Pingoru: Oct 23, 2026, 07:01 PM UTC

Affected components

DAX Copilot Mobile - Login (US-01)DAX Copilot for DMO - Login (US-01)Dragon Medical One - Login (United States)Dragon Medical One - Login (Canada)DAX Copilot for Epic - Audio Recording (US-01)DAX Copilot for Epic - Audio Recording (US-02)DAX Copilot for Epic - Audio Recording (US-03)DAX Copilot for DMO - Login (US-02)DAX Copilot for DMO - Login (US-03)DAX Copilot Mobile - Login (US-02)

Update timeline

monitoring Oct 23, 2026, 07:01 PM UTC

Microsoft is aware of and actively monitoring the PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and related activity. Based on the information currently available, Microsoft has found no evidence that these vulnerabilities have been exploited in connection with the following Microsoft-operated and developed systems: • Dragon Medical One • DAX Copilot • Dragon Copilot Microsoft has applied the available security updates for these vulnerabilities to the systems listed above.
monitoring Oct 23, 2026, 07:03 PM UTC

We are continuing to monitor for any further issues.
monitoring Oct 23, 2026, 07:54 PM UTC

We are continuing to monitor for any further issues.
resolved Oct 30, 2026, 06:12 PM UTC

This incident has been resolved.

Your product runs on more than Nuance

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.