{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3abeganovichsnappdf/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:beganovich:snappdf:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-110646"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["snappdf (1.1.0-6.0.x)"],"_cs_severities":["high"],"_cs_tags":["remote-code-execution","vulnerability","php"],"_cs_type":"advisory","_cs_vendors":["Beganovich"],"content_html":"\u003cp\u003eBeganovich snappdf, a library for generating PDFs from URLs in PHP applications, contains a critical OS command injection vulnerability (CVE-2026-110646) affecting versions 1.1.0 through 6.0.x. The vulnerability arises from insufficient sanitization of input passed to the setUrl() method on Windows environments. Specifically, the library's executeOnWindows() function passes the URL parameter unescaped to PHP's exec() system command. An attacker capable of influencing the input to setUrl() can inject shell metacharacters, such as the ampersand (\u0026amp;), to terminate the intended command and execute arbitrary system commands with the privileges of the underlying web server or PHP process. This flaw allows for full system compromise on affected Windows servers running vulnerable versions of the snappdf library.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for remote code execution (RCE) on Windows-based web servers hosting applications that utilize the vulnerable snappdf library. This can lead to total system compromise, data exfiltration, or deployment of secondary payloads within the target environment. The vulnerability affects any application utilizing snappdf for PDF generation that accepts user-controlled input for the URL parameter.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the snappdf library to version 6.1.0 or later immediately to incorporate proper input sanitization.\u003c/li\u003e\n\u003cli\u003eAudit existing PHP application code for any instance of the snappdf library calling setUrl() where the argument is derived from user input.\u003c/li\u003e\n\u003cli\u003eImplement strict input validation and allowlisting for any URLs passed to PDF generation functions if upgrading immediately is not feasible.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T16:38:00Z","date_published":"2026-10-14T16:38:00Z","id":"https://feed.craftedsignal.io/briefs/2026-10-snappdf-command-injection/","summary":"Beganovich snappdf versions 1.1.0 through 6.0.x are vulnerable to OS command injection via the setUrl() function on Windows, allowing unauthenticated attackers to achieve arbitrary code execution.","title":"OS Command Injection in Beganovich snappdf","url":"https://feed.craftedsignal.io/briefs/2026-10-snappdf-command-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:beganovich:snappdf:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}