Microsoft identified and monitored two PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619) potentially affecting Nuance Dragon Medical services, including Dragon Medical One, DAX Copilot, and Dragon Copilot. No evidence of exploitation was found across any of these systems throughout the monitoring period. The incident was resolved after approximately 167 hours of active monitoring.
Trusted by 1,000+ teams
Stop finding out about outages from your users. Monitor 6,320+ cloud services and get alerted the second something breaks.
This incident has been resolved.
We are continuing to monitor for any further issues.
We are continuing to monitor for any further issues.
Microsoft is aware of and actively monitoring the PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and related activity. Based on the information currently available, Microsoft has found no evidence that these vulnerabilities have been exploited in connection with the following Microsoft-operated and developed systems:
• Dragon Medical One
• DAX Copilot
• Dragon Copilot
With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.
Start free trialNo credit card required · Cancel anytime · 6320 services available
Integrations with