SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-75956

HIGH · CVSS 8.7 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-08-19 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The J-BusinessDirectory extension for Joomla versions prior to 6.2.3 is vulnerable due to improper handling of pagination parameters, allowing attackers to exploit type errors in PHP and potentially trigger a denial-of-service (DoS) condition. This vulnerability arises from the lack of strict typing and validation of pagination values, which could lead to application crashes or degraded performance. Joomla administrators and developers using this extension should prioritize updating to the latest version to mitigate the risk.

CVE
CVE-2026-75956
Severity
HIGH
CVSS
8.7
EPSS
0.31%

Original NVD Description

Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values (for example limitstart[]) could trigger PHP type errors in arithmetic, and limit was not validated before use in list queries.