CVE-2026-63243

Full vulnerability record from the local CVENow database.

Description

An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an affected device without prior pairing or authentication.

Severity

MEDIUM

CVSS score

4.3 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Published

2026-10-23 07:16:38.563000

Last modified

2026-10-23 19:42:24.553000

View original CVE JSON

{
  "id": "CVE-2026-63243",
  "sourceIdentifier": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
  "published": "2026-10-23T07:16:38.563",
  "lastModified": "2026-10-23T19:42:24.553",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication."
    }
  ],
  "affected": [
    {
      "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
      "affectedData": [
        {
          "vendor": "Creative Labs",
          "product": "Creative Sound Blaster Katana V2, V2X, SE",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.30.260813.1100",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ]
  },
  "references": [
    {
      "url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/",
      "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4"
    }
  ]
}