{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63243", "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "state": "PUBLISHED", "assignerShortName": "CSA", "dateReserved": "2026-07-16T02:35:54.250Z", "datePublished": "2026-10-23T06:49:26.922Z", "dateUpdated": "2026-10-23T06:49:26.922Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "shortName": "CSA", "dateUpdated": "2026-10-23T06:49:26.922Z"}, "title": "Firmware verification vulnerability", "datePublic": "2026-08-27T06:40:00.000Z", "affected": [{"vendor": "Creative Labs", "product": "Creative Sound Blaster Katana V2, V2X, SE", "versions": [{"status": "affected", "version": "1.30.260813.1100"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication.&nbsp;</p>"}]}], "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Creative Sound Blaster Katana V2, V2X, SE", "vendor": "Creative Labs", "versions": [{"status": "affected", "version": "1.30.260813.1100"}]}], "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication."}], "id": "CVE-2026-63243", "lastModified": "2026-10-23T19:42:24.553", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "type": "Secondary"}]}, "published": "2026-10-23T07:16:38.563", "references": [{"source": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"}], "sourceIdentifier": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "vulnStatus": "Awaiting Analysis"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.30.260813.1100"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Creative Sound Blaster Katana V2, V2X, SE", "source": "cna", "vendor": "Creative Labs"}, "product": "creative_sound_blaster_katana", "vendor": "creative_labs"}], "created": "2026-10-23T09:00:15.769599+00:00", "updated": "2026-10-26T19:09:51.038260+00:00", "vendors": ["creative_labs", "creative_labs$PRODUCT$creative_sound_blaster_katana"], "weaknesses": ["CWE-287"]}