CVE-2026-63243: Firmware verification vulnerability
Published Oct 23, 2026
·Updated
An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an affected device without prior pairing or authentication.
Affected Software
1 affected component
Creative Sound Blaster Katana
Event History
Oct 23, 2026
CVE Published
via MITRE·06:49 AM
Data Sourced
via MITRE·06:49 AM
DescriptionSeverity
Frequently Asked Questions
1
Who is exposed to this issue?
Creative Sound Blaster Katana devices with the affected BLE implementation are exposed when they are within Bluetooth range of an attacker.
2
Does an attacker need to pair with the device or have credentials first?
No. The vulnerability allows an attacker within Bluetooth range to connect without prior pairing or authentication.
3
What impact is described from successful exploitation?
The provided information identifies an authentication bypass that permits an unauthorized BLE connection. It does not specify any further actions or effects available after connecting.