{"affected":[{"defaultStatus":"unaffected","product":"Creative Sound Blaster Katana V2, V2X, SE","source":"CNA: CSA","vendor":"Creative Labs","versions":[{"status":"affected","version":"1.30.260813.1100"}]}],"cveId":"CVE-2026-63243","cwes":["CWE-287"],"description":"An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication.","epss":{"date":"2026-11-02","percentile":0.10511,"score":0.00205},"exploits":[],"kev":null,"metrics":[{"score":4.3,"severity":"medium","source":"CNA: CSA","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},{"score":4.3,"severity":"medium","source":"NVD: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"}],"modifiedAt":1793636262407,"publishedAt":1792738166922,"references":[{"source":"CNA: CSA","tags":[],"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"},{"source":"5f57b9bf-260d-4433-bf07-b6a79e9bb7d4","tags":[],"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"}],"remediation":[],"revision":"b6916caa902cda412db528f76ac474928c16632d21abddb7be96f1d00cad484c","sources":[{"modifiedAt":1793632237645,"name":"CNA: CSA","retrievedAt":1793635766603,"url":"https://www.cve.org/CVERecord?id=CVE-2026-63243"},{"modifiedAt":1793636262407,"name":"NVD","retrievedAt":1793643418776,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63243"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793635807108,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-63243"}],"ssvc":{"assessedAt":1793632159901,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Firmware verification vulnerability","updatedAt":1793643418776}