CVE-2026-55981 - Vulnerability Details - OpenCVE

A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Creative Labs	Creative Sound Blaster Katana

No data.

No data.

References

Link	Providers
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/

History

Mon, 02 Nov 2026 20:00:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-307

Mon, 02 Nov 2026 17:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-494

Mon, 02 Nov 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 26 Oct 2026 19:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Creative Labs Creative Labs creative Sound Blaster Katana
Vendors & Products		Creative Labs Creative Labs creative Sound Blaster Katana

Fri, 23 Oct 2026 09:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-307

Fri, 23 Oct 2026 07:00:00 +0000

Type	Values Removed	Values Added
Description		A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device.
Title		Firmware verification vulnerability
References		https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/
Metrics		cvssV3_1 `{'score': 9.6, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: CSA

Published: 2026-10-23T06:47:05.745Z

Updated: 2026-11-02T16:39:50.254Z

Reserved: 2026-06-18T04:11:38.685Z

Link: CVE-2026-55981

Vulnrichment

Updated: 2026-11-02T14:40:26.749Z

NVD

Status : Awaiting Analysis

Published: 2026-10-23T07:16:38.420

Modified: 2026-11-02T17:17:44.670

Link: CVE-2026-55981

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-55981", "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "state": "PUBLISHED", "assignerShortName": "CSA", "dateReserved": "2026-06-18T04:11:38.685Z", "datePublished": "2026-10-23T06:47:05.745Z", "dateUpdated": "2026-11-02T16:39:50.254Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "shortName": "CSA", "dateUpdated": "2026-10-23T06:47:05.745Z"}, "title": "Firmware verification vulnerability", "datePublic": "2026-08-27T06:40:00.000Z", "affected": [{"vendor": "Creative Labs", "product": "Creative Sound Blaster Katana V2, V2X, SE", "versions": [{"status": "affected", "version": "1.30.260813.1100"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a legitimate firmware image\nand upload the modified firmware to an affected device.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a legitimate firmware image\nand upload the modified firmware to an affected device.</p>"}]}], "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9.6, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-494", "lang": "en", "description": "CWE-494 Download of Code Without Integrity Check"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-02T14:38:46.242999Z", "id": "CVE-2026-55981", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T16:39:50.254Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-55981", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-02T14:38:46.242999Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-494", "description": "CWE-494 Download of Code Without Integrity Check"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-02T14:40:26.749Z"}}], "cna": {"title": "Firmware verification vulnerability", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Creative Labs", "product": "Creative Sound Blaster Katana V2, V2X, SE", "versions": [{"status": "affected", "version": "1.30.260813.1100"}], "defaultStatus": "unaffected"}], "datePublic": "2026-08-27T06:40:00.000Z", "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-134/"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "A firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a legitimate firmware image\nand upload the modified firmware to an affected device.", "supportingMedia": [{"type": "text/html", "value": "<p>A firmware verification vulnerability in Creative Sound\nBlaster Katana could allow an attacker to modify a legitimate firmware image\nand upload the modified firmware to an affected device.</p>", "base64": false}]}], "providerMetadata": {"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "shortName": "CSA", "dateUpdated": "2026-10-23T06:47:05.745Z"}}}, "cveMetadata": {"cveId": "CVE-2026-55981", "state": "PUBLISHED", "dateUpdated": "2026-11-02T16:39:50.254Z", "dateReserved": "2026-06-18T04:11:38.685Z", "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "datePublished": "2026-10-23T06:47:05.745Z", "assignerShortName": "CSA"}, "dataVersion": "5.2"}