CVE-2026-78136
High
Description
chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.
SeverityHigh
CVSS7.8
Exploit probability—
ProductCHIRP
PublishedAug 23, 2026
First seenAug 23, 2026
Weakness typeCWE-95CWE-95
How to fix
Update
- chirpmyradio CHIRP39178dbfc4fece083ab9ed20286d6ae3a91a718e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chirpmyradio CHIRP | v < 39178dbfc4fece083ab9ed20286d6ae3a91a718e | 39178dbfc4fece083ab9ed20286d6ae3a91a718e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.