Authentication Flaw in Bluetooth Low Energy Implementation of Creative Sound Blaster Katana
CVE-2026-63243

4.3MEDIUM

Key Information:

Vendor

Creative Labs

Status
Creative Sound Blaster Katana V2, V2x, Se
Vendor
CVE Published:
23 October 2026

What is CVE-2026-63243?

An authentication flaw exists in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana. This vulnerability enables an attacker within Bluetooth range to establish an unauthorized connection to the device, bypassing necessary pairing and authentication processes. This could lead to unauthorized access and potential data leakage for users of the affected product.

Affected Version(s)

Creative Sound Blaster Katana V2, V2X, SE 1.30.260813.1100

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-20...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.