CVE-2006-4070: Imendio Planner

Medium severity, CVSS 5.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename.

Affected products

Published 2006-08-10. Last modified 2026-06-16.