CVE-2026-75951 is an authorization bypass vulnerability classified under CWE-639 (Authorization Bypass Through User-Controlled Key) affecting the J-BusinessDirectory extension for Joomla. Versions from 1.0.0 up to and including 6.2.2 are vulnerable. The flaw involves insecure direct object references in multiple frontend and API actions, which could allow an attacker to bypass authorization controls and access restricted resources. The vulnerability does not require privileges or user interaction and has a medium impact on confidentiality and integrity.

Successful exploitation could allow an unauthenticated attacker to bypass authorization controls and access or manipulate data or functionality intended to be restricted. The impact on confidentiality and integrity is low to limited, as indicated by the CVSS vector. There are no known exploits in the wild at this time.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory from cmsjunkie.com or Joomla for current remediation guidance. Until a fix is available, restrict access to the affected extension and monitor for suspicious activity related to unauthorized access attempts.