A vulnerability marked as critical has been reported in thumbler up to 1.1.2. Affected by this issue is the function
thumbnail. The manipulation of the argument size leads to os command injection.
This vulnerability is traded as CVE-2026-26833. Access to the local network is required for this attack to succeed. There is no exploit available.
