Search

Find a vulnerability

Search criteria

    4 vulnerabilities by Creative Labs

    CVE-2026-63243 (GCVE-0-2026-63243)

    Vulnerability from nvd – Published: 2026-10-23 06:49 – Updated: 2026-10-23 06:49
    VLAI
    Title
    Firmware verification vulnerability
    Summary
    An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an affected device without prior pairing or authentication.
    Severity
    4.3 (Medium)
    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
    Assigner
    CSA CNA under the mitre root
    CNA scorecard C 62/100 over 60 records in the last 180 days details
    References
    Impacted products
    Date Public
    2026-08-27 06:40
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Creative Sound Blaster Katana V2, V2X, SE",
          "vendor": "Creative Labs",
          "versions": [
            {
              "status": "affected",
              "version": "1.30.260813.1100"
            }
          ]
        }
      ],
      "datePublic": "2026-08-27T06:40:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-23T06:49:26.922Z",
        "orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
        "shortName": "CSA"
      },
      "references": [
        {
          "url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Firmware verification vulnerability",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
    "assignerShortName": "CSA",
    "cveId": "CVE-2026-63243",
    "datePublished": "2026-10-23T06:49:26.922Z",
    "dateReserved": "2026-07-16T02:35:54.250Z",
    "dateUpdated": "2026-10-23T06:49:26.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-55981 (GCVE-0-2026-55981)

    Vulnerability from nvd – Published: 2026-10-23 06:47 – Updated: 2026-10-23 06:47
    VLAI
    Title
    Firmware verification vulnerability
    Summary
    A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device.
    Severity
    9.6 (Critical)
    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    Assigner
    CSA CNA under the mitre root
    CNA scorecard C 62/100 over 60 records in the last 180 days details
    References
    Impacted products
    Date Public
    2026-08-27 06:40
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Creative Sound Blaster Katana V2, V2X, SE",
          "vendor": "Creative Labs",
          "versions": [
            {
              "status": "affected",
              "version": "1.30.260813.1100"
            }
          ]
        }
      ],
      "datePublic": "2026-08-27T06:40:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a legitimate firmware image\nand upload the modified firmware to an affected device.\u003c/p\u003e"
            }
          ],
          "value": "A firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a legitimate firmware image\nand upload the modified firmware to an affected device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-23T06:47:05.745Z",
        "orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
        "shortName": "CSA"
      },
      "references": [
        {
          "url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Firmware verification vulnerability",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
    "assignerShortName": "CSA",
    "cveId": "CVE-2026-55981",
    "datePublished": "2026-10-23T06:47:05.745Z",
    "dateReserved": "2026-06-18T04:11:38.685Z",
    "dateUpdated": "2026-10-23T06:47:05.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-63243 (GCVE-0-2026-63243)

    Vulnerability from cvelistv5 – Published: 2026-10-23 06:49 – Updated: 2026-10-23 06:49
    VLAI
    Title
    Firmware verification vulnerability
    Summary
    An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an affected device without prior pairing or authentication.
    Severity
    4.3 (Medium)
    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
    Assigner
    CSA CNA under the mitre root
    CNA scorecard C 62/100 over 60 records in the last 180 days details
    References
    Impacted products
    Date Public
    2026-08-27 06:40
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Creative Sound Blaster Katana V2, V2X, SE",
          "vendor": "Creative Labs",
          "versions": [
            {
              "status": "affected",
              "version": "1.30.260813.1100"
            }
          ]
        }
      ],
      "datePublic": "2026-08-27T06:40:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "An\nauthentication vulnerability in the Bluetooth Low Energy (BLE) implementation\nof Creative Sound Blaster Katana could allow an attacker within Bluetooth range\nto connect to an affected device without prior pairing or authentication."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-23T06:49:26.922Z",
        "orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
        "shortName": "CSA"
      },
      "references": [
        {
          "url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Firmware verification vulnerability",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
    "assignerShortName": "CSA",
    "cveId": "CVE-2026-63243",
    "datePublished": "2026-10-23T06:49:26.922Z",
    "dateReserved": "2026-07-16T02:35:54.250Z",
    "dateUpdated": "2026-10-23T06:49:26.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-55981 (GCVE-0-2026-55981)

    Vulnerability from cvelistv5 – Published: 2026-10-23 06:47 – Updated: 2026-10-23 06:47
    VLAI
    Title
    Firmware verification vulnerability
    Summary
    A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device.
    Severity
    9.6 (Critical)
    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    Assigner
    CSA CNA under the mitre root
    CNA scorecard C 62/100 over 60 records in the last 180 days details
    References
    Impacted products
    Date Public
    2026-08-27 06:40
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Creative Sound Blaster Katana V2, V2X, SE",
          "vendor": "Creative Labs",
          "versions": [
            {
              "status": "affected",
              "version": "1.30.260813.1100"
            }
          ]
        }
      ],
      "datePublic": "2026-08-27T06:40:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a legitimate firmware image\nand upload the modified firmware to an affected device.\u003c/p\u003e"
            }
          ],
          "value": "A firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a legitimate firmware image\nand upload the modified firmware to an affected device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-23T06:47:05.745Z",
        "orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
        "shortName": "CSA"
      },
      "references": [
        {
          "url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Firmware verification vulnerability",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
    "assignerShortName": "CSA",
    "cveId": "CVE-2026-55981",
    "datePublished": "2026-10-23T06:47:05.745Z",
    "dateReserved": "2026-06-18T04:11:38.685Z",
    "dateUpdated": "2026-10-23T06:47:05.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}