beganovich CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL beganovich CVE published 2026-10-14

CVE-2026-110646

PatchSiren debrief for CVE-2026-110646: Beganovich snappdf versions 1.1.0 to 6.0.0 on Windows systems are vulnerable to OS command injection via the setUrl() function. This critical vulnerability allows attackers to execute arbitrary commands, posing a significant risk to defenders. The vulnerability is caused by the setUrl() function passing unescaped input to PHP's exec() function. Defenders responsible [truncated]