diff --git a/core/composer.json b/core/composer.json
index e32736730a..1d0de96d8d 100644
--- a/core/composer.json
+++ b/core/composer.json
@@ -75,6 +75,7 @@
         "phpmailer/phpmailer": "7.*",
         "phpoption/phpoption": "*",
         "predis/predis": "*",
+        "rosell-dk/exec-with-fallback": "*",
         "rosell-dk/webp-convert": "*",
         "secondnetwork/blade-tabler-icons": "^3.46",
         "simplepie/simplepie": "1.*",
diff --git a/core/src/Console/Packages/ExtrasCommand.php b/core/src/Console/Packages/ExtrasCommand.php
index 098db6b85d..1679a156e7 100644
--- a/core/src/Console/Packages/ExtrasCommand.php
+++ b/core/src/Console/Packages/ExtrasCommand.php
@@ -1,8 +1,7 @@
 <?php namespace EvolutionCMS\Console\Packages;
 
-use Doctrine\DBAL\Exception;
+use ExecWithFallback\ExecWithFallback;
 use Illuminate\Console\Command;
-use \EvolutionCMS;
 use Illuminate\Support\Facades\File;
 
 class ExtrasCommand extends Command
@@ -870,7 +869,7 @@ protected function runArtisanCommand(array $args)
         foreach ($args as $arg) {
             $command .= ' ' . escapeshellarg($arg);
         }
-        passthru($command);
+        ExecWithFallback::exec($command);
     }
 
     protected function normalizeComposerVersion($version, array $branches = [], $defaultBranch = '')
diff --git a/core/src/Console/SiteUpdateCommand.php b/core/src/Console/SiteUpdateCommand.php
index 0cd1899a96..078832dd1d 100644
--- a/core/src/Console/SiteUpdateCommand.php
+++ b/core/src/Console/SiteUpdateCommand.php
@@ -5,6 +5,7 @@
 use EvolutionCMS\Models\SiteModuleRole;
 use EvolutionCMS\Services\ComposerVersionSynchronizer;
 use EvolutionCMS\Services\Store\RemoteTransportService;
+use ExecWithFallback\ExecWithFallback;
 use Illuminate\Console\Command;
 
 /**
@@ -990,7 +991,7 @@ protected function shellCommandExists(string $command): bool
             ? 'where ' . escapeshellarg($command) . ' >NUL 2>NUL'
             : 'command -v ' . escapeshellarg($command) . ' >/dev/null 2>&1';
 
-        exec($probe, $output, $exitCode);
+        ExecWithFallback::exec($probe, $output, $exitCode);
 
         return (int) $exitCode === 0;
     }
@@ -1013,7 +1014,7 @@ protected function normalizeUpdateRepository(string $repository): string
     protected function runCoreShellCommand(string $command): void
     {
         $fullCommand = 'cd ' . escapeshellarg(EVO_CORE_PATH) . ' && ' . $command . ' 2>&1';
-        exec($fullCommand, $output, $exitCode);
+        ExecWithFallback::exec($fullCommand, $output, $exitCode);
 
         if ((int) $exitCode !== 0) {
             $message = 'Command failed: ' . $command;
diff --git a/install/cli-install.php b/install/cli-install.php
index 1550362bf8..4b6393a43a 100644
--- a/install/cli-install.php
+++ b/install/cli-install.php
@@ -1,5 +1,6 @@
 <?php
 
+use ExecWithFallback\ExecWithFallback;
 use EvolutionCMS\Facades\Console;
 
 $base_path = dirname(__DIR__) . '/';
@@ -41,6 +42,30 @@ function runCliInstall(array $argv): int
 
 class InstallEvo
 {
+    /**
+     * Run Composer update through the ExecWithFallback library.
+     *
+     * This replaces the previous manual fallback chain (passthru → exec → shell_exec)
+     * with the unified ExecWithFallback::exec() which automatically tries methods in order:
+     * exec() → passthru() → popen() → proc_open() → shell_exec() → Exception.
+     *
+     * @return void
+     */
+    protected function runComposerUpdate(string $cmd): void
+    {
+        $out = [];
+        $exitCode = 0;
+        try {
+            ExecWithFallback::exec($cmd, $out, $exitCode);
+            if (!empty($out) && is_array($out)) {
+                echo implode(PHP_EOL, $out), PHP_EOL;
+            }
+        } catch (\Exception $e) {
+            info('- No command execution methods available (all disabled).');
+            warning('⚠ Run "composer update" manually.');
+        }
+    }
+
     public $typeInstall = '';
     public $databaseType = '';
     public $databaseServer = '';
@@ -463,7 +488,6 @@ public function composerUpdate()
             return;
         }
 
-        $disabled = array_map('trim', explode(',', ini_get('disable_functions') ?: ''));
         $composerBin = EVO_CORE_PATH . 'vendor/bin/composer';
         $workingDir  = EVO_CORE_PATH;
 
@@ -480,28 +504,7 @@ public function composerUpdate()
             escapeshellarg($workingDir)
         );
 
-        $exitCode = null;
-        if (!in_array('passthru', $disabled, true)) {
-            passthru($cmd, $exitCode);
-        } elseif (!in_array('exec', $disabled, true)) {
-            exec($cmd . ' 2>&1', $out, $exitCode);
-            echo implode(PHP_EOL, $out), PHP_EOL;
-        } elseif (!in_array('shell_exec', $disabled, true)) {
-            $output = shell_exec($cmd . ' 2>&1');
-            $exitCode = (is_string($output) && $output !== '') ? 0 : 1;
-            echo $output;
-        } else {
-            info('- The passthru/exec/shell_exec functions are disabled in php.ini.');
-            warning('⚠ Run "composer update" manually.');
-            return;
-        }
-
-        if ($exitCode === 0) {
-            success('✔ Dependencies updated successfully.');
-        } else {
-            error("✖ Composer finished with the code {$exitCode}.");
-            warning('⚠ Make sure you have execute permissions and try "composer update" manually.');
-        }
+        $this->runComposerUpdate($cmd);
     }
 
     public function realInstall()