CVE-2026-110646 - Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()
CVE ID :CVE-2026-110646 Published : Oct. 14, 2026, 3:17 p.m. | 15 minutes ago Description :Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL. Attackers can supply cmd.exe...