The vulnerability identified as CVE-2026-24565 affects bPlugins B Accordion versions up to and including 2.0.2. It allows an attacker with low privileges and network access to cause sensitive information to be inserted into data sent by the application, which can then be retrieved. This compromises the confidentiality of the sensitive data. The CVSS vector indicates no user interaction is required, and the attack scope is unchanged. No official patch or fix details are available from the vendor or other sources at this time.

The vulnerability allows unauthorized retrieval of sensitive information embedded in sent data, compromising confidentiality. There is no impact on data integrity or system availability. The attack requires low privileges and network access but no user interaction, which could facilitate exploitation in certain environments. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit exposure by restricting network access to the affected component and monitoring for unusual data transmissions involving the B Accordion plugin. Avoid deploying affected versions in sensitive environments where confidentiality is critical.