{"id":"CVE-2026-63243","title":"Firmware verification vulnerability","summary":"An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication.","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssSource":"cna","vendor":"Creative Labs","product":"Creative Sound Blaster Katana V2, V2X, SE","affected":["creative_sound_blaster_katana_v2_v2x_se 1.30.260813.1100"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T06:49:26.922Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-63243","references":[{"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T07:18:46.743Z","slug":"CVE-2026-63243","body":"## Overview\n\nAn\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication.\n\n## Affected\n\n- `creative_sound_blaster_katana_v2_v2x_se 1.30.260813.1100`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}