Sound Blaster Katana CVE-2026-63243

The attacker must be within Bluetooth Low Energy radio range of the target (AV:A, Adjacent) and the Sound Blaster Katana must be powered on with its BLE interface connectable. The flaw is that the device permits a BLE connection without any prior pairing or authentication, so no credentials, user interaction, or privileges are needed (PR:N/UI:N). The primary limiting factor is physical proximity: exploitation is not possible remotely over the internet or a routed network, only from within Bluetooth range. The available sources do not describe what specific commands or data the connection exposes, nor whether any non-default configuration is required.

This is a low-to-moderate real-world risk despite the clean exploitation preconditions. The CVSS 3.1 vector (AV:A/AC:L/PR:N/UI:N) describes an adjacent, low-complexity, unauthenticated, no-interaction flaw - easy to trigger for anyone in range - but the impact is deliberately scoped low: C:N, I:L, A:N yields only a 4.3 (Medium) base score, meaning no confidentiality or availability loss and only limited integrity impact (an unpaired BLE connection). The AV:A (Adjacent) metric is the dominant limiting factor: exploitation requires Bluetooth radio proximity, not network/internet reach, which sharply constrains scalability and rules out mass remote exploitation. No EPSS score, SSVC automatable/technical-impact values, KEV listing, or PoC reference is present in the input, so the only priority signal is the vuln.today 'this_month' Decision label - a moderate, non-urgent tier consistent with a proximity-bound, limited-impact issue. Note a tag/vector tension: the input Tags label this 'Information Disclosure,' yet the supplied CVSS vector sets C:N (no confidentiality impact) and attributes impact to integrity (I:L) - verify the actual security consequence with the vendor/CSA advisory, as the classification and the scored impact disagree.

An attacker positioned within Bluetooth range of a powered-on Creative Sound Blaster Katana establishes a BLE connection to the device without completing any pairing or authentication handshake, gaining unauthorized ability to interact with it. No public exploit or PoC is identified in the available data; the specific actions an attacker can perform after connecting are not detailed in the sources beyond the unauthorized-connection primitive.