CVE-2026-63243

MediumCVSS 4.3

Published: 23/10/2026(UTC)Translated: 23/10/2026(UTC)NVD NIST

Summary

An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana allows an attacker within Bluetooth range to connect to an affected device without prior pairing or authentication. This enables unauthorized access to the device.

Risk Assessment

A person within Bluetooth range could gain unauthorized access to the device without pairing, potentially leading to device takeover or configuration changes. The risk is especially relevant in public and office environments where the device is within range of many people.

Recommendation

Update the device software to the vendor-provided version that fixes the vulnerability. Until the update is applied, disable the BLE interface if not required and restrict physical access to the device.

Other vulnerabilities in Creative Sound Blaster Katana

CVE-2026-55981Critical
A firmware verification vulnerability in Creative Sound Blaster Katana allows an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device. The lack of effective integrity verification enables installation of unauthorized software.

Original NVD description (English source)

An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an affected device without prior pairing or authentication.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS