CVE-2026-78136
Eval Injection via Crafted CSV in CHIRP
chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products