Question 1

What is CVE-2026-53502 — CVE-2026-53502?

Accepted Answer

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILE_LOADER_ROOT_PATH through watermark or frame filter input. This issue is fixed in 7.8.0.

Question 2

What is the authoritative source for CVE-2026-53502?

Accepted Answer

CVE-2026-53502 (CVE-2026-53502) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-53502CVE-2026-53502

Description

Scoring