CVE-2026-63243

Medium · 4.3

CVSS

4.3

EPSS

0.2%

Published

Oct 23, 2026

CISA due date

—

The record

An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an affected device without prior pairing or authentication.

Affected packages

Ecosystem	Package	Introduced	Fixed