CVE-2026-75956 in J-BusinessDirectory Extension

Résumé

par MITRE • 19/08/2026

Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values (for example limitstart[]) could trigger PHP type errors in arithmetic, and limit was not validated before use in list queries.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: Joomla
• Réserver: 18/08/2026
• Divulgation: 19/08/2026
• Modérer: accepté
• Entrée: VDB-393170
• CPE: prêt
• CWE: CWE-20 (confirmé)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-75956
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-75956
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-75956/