CVE-2026-75956 is a resource allocation vulnerability (CWE-770) in the J-BusinessDirectory extension for Joomla by cmsjunkie.com. Versions from 1.0.0 up to 6.2.2 are affected. The flaw is due to insufficient validation and typing of pagination parameters, specifically 'limitstart' and 'limit'. Non-numeric or array inputs can trigger PHP type errors during arithmetic operations and cause unbounded resource consumption in database queries, resulting in a denial-of-service condition.

An attacker can supply crafted pagination parameters to cause PHP errors and potentially exhaust server resources, leading to denial of service. This can disrupt availability of the affected Joomla extension, impacting websites using it.

No official patch or fix is currently documented. Users should monitor the vendor's advisories for updates. In the meantime, restricting or validating input parameters at the web application firewall or server level may help mitigate exploitation attempts. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.