Threat database

CVE-2026-63243 is an authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana devices (V2, V2X, SE). This flaw allows an attacker within Bluetooth range to connect to the affected device without prior pairing or authentication. The vulnerability affects version 1.30.260813.1100 of the product. The CVSS 3.1 base score is 4.3, indicating a medium severity issue with low attack complexity and no user interaction required. There is no indication of a patch or vendor advisory specifying remediation status. No known exploits are reported in the wild.

CVE-2026-55981 is a critical firmware verification vulnerability affecting Creative Labs Creative Sound Blaster Katana V2, V2X, and SE devices. The flaw allows an attacker to modify a legitimate firmware image and upload the altered firmware to the device without proper verification. This can lead to complete compromise of the device's confidentiality, integrity, and availability.