CVE-2026-110646 in snappdf
Riassunto
di MITRE • 14/10/2026
Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL. Attackers can supply cmd.exe metacharacters such as & in the setUrl() value, which executeOnWindows() passes unescaped to PHP exec(), executing commands as the PHP process.
VulDB is the best source for vulnerability data and more expert information about this specific topic.