HIGHVulnerability

CVE-2026-78136

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

Properties

severity
HIGH
score
7.8
epss_score
0.00188
cve_id
CVE-2026-78136
vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
published_at
2026-08-23T01:17:20.143
last_modified
2026-09-09T16:04:24.933
epss_percentile
0.08539

Related Entities (3)

ENRICHED_BY (1)

[Source]FIRST EPSS

HAS_WEAKNESS (1)

[Weakness]Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

DESCRIBED_BY (1)

[Source]NVD

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-78136 — Ninja Signal Threat Intelligence | Ninja Signal