CVE-2026-110646

Deferred Deferred - Pending Action

OS Command Injection in Beganovich Snappdf on Windows

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: VulnCheck

Description

Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL. Attackers can supply cmd.exe metacharacters such as & in the setUrl() value, which executeOnWindows() passes unescaped to PHP exec(), executing commands as the PHP process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110646

EUVD

EUVD-2026-101274

Affected Vendors & Products

Vendor	Product	Version / Range
beganovich	snappdf	1.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is an OS command injection flaw in the snappdf library affecting Windows systems. It occurs when user-controlled URLs containing cmd.exe metacharacters like & are passed unescaped to PHP's exec() function via the executeOnWindows() method. This allows attackers to inject and execute arbitrary commands on the host system as the PHP process user.

Detection Guidance

Check the installed version of snappdf. If it is below 6.1.0, the system is vulnerable. Run: composer show beganovich/snappdf or check the version in your project's composer.lock file.

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary commands on your Windows system if you use snappdf versions 1.1.0 through 6.0.9. Attackers could take full control of the system, install malware, steal data, or perform other malicious actions without needing privileges or user interaction.

Compliance Impact

This vulnerability could lead to data breaches, unauthorized access, or system compromise, violating GDPR's integrity and confidentiality requirements and HIPAA's security rules for protected health information. Organizations using affected versions may face compliance violations, fines, and reputational damage.

Mitigation Strategies

Upgrade snappdf to version 6.1.0 or later immediately. If upgrading is not possible, restrict access to the setUrl() function or disable Windows execution paths until patched.

Hi! I’m here to help you understand CVE-2026-110646. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70