---
id: CVE-2026-63243
title: Firmware verification vulnerability
summary: >-
  An

  authentication vulnerability in the Bluetooth Low Energy (BLE) implementation

  of Creative Sound Blaster Katana could allow an attacker within Bluetooth
  range

  to connect to an affected device without prior pairing or authentication.
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
cvssSource: cna
vendor: Creative Labs
product: 'Creative Sound Blaster Katana V2, V2X, SE'
affected:
  - creative_sound_blaster_katana_v2_v2x_se 1.30.260813.1100
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T06:49:26.922Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-63243'
references:
  - url: 'https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/'
tags:
  - cve.org
ingestedAt: '2026-10-23T07:18:46.743Z'
---

## Overview

An
authentication vulnerability in the Bluetooth Low Energy (BLE) implementation
of Creative Sound Blaster Katana could allow an attacker within Bluetooth range
to connect to an affected device without prior pairing or authentication.

## Affected

- `creative_sound_blaster_katana_v2_v2x_se 1.30.260813.1100`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.