What’s Vulnerable › Vulnerabilities

CVE-2026-78136

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-23 · updated 2026-10-12
• Weakness: CWE-95

Description

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

References

• https://github.com/cduram/CHIRP-CodeExecution_via_Malicious_ImageFile
• https://github.com/kk7ds/chirp/commit/39178dbfc4fece083ab9ed20286d6ae3a91a718e

Get alerted when CVE-2026-78136 or the next vulnerability affects your stack