CVE-2026-78136

[CVE catalog]

Severity

High · CVSS 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Published

Aug 23, 2026, 12:48:57 AM UTC

Updated

Sep 17, 2026, 6:23:14 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.21% · Oct 25, 2026

This update for chirp fixes the following issues: Changes in chirp: - Update to version 20260911: * ftm300d: Experimental Yaesu FTM-300DR driver * Update Ukrainian localization * ar8200: Fix importing memories with AM mode * Unify Baofeng setting descriptions across drivers * Add Yaesu FT5D * uvb5: Fix Reverse setting - Update to version 20260904: * Fix RB28/RB628 tone and DTCS index mapping * Retevis RB28/RB628: Fix Busy Channel Lockout display * various bug fixes - Update to version 20260821: * Add Kenwood NX-800 driver * CVE-2026-78136: kenwood_itm: Fix DCS parsing (boo#1280123) * tmd710: various bug fixes * Add TK-3180E support * tk8180: various updates * Support Shift+F10 convention for context menu in memedit * Add Baofeng BF-T20, BF-T20FRS setting descriptions * Add QYT KT-8900 setting documentation * Add user-friendly Baofeng UV-5R setting descriptions - Update to version 20260626: * uvk5_egzumer: Fix battery_text and mic_bar never being saved * Fix open filter translated string - Update to version 20260619: * Add Baofeng BF-5RH as alias of UV-5RH * locale: Added Czech translation * generic_csv: Fix ImmutableValueError when exporting special memories - Update to version 20260612: * Add test image for Bajeton BJ7800 * Update RT-920 test image for FM,AM & HF memories * Add new model Bajeton BJ7800 as a sub-class of RT-920 - Update to version 20260605: * Update boot, zone, scan and alarm channels on channel deletion * Add GM-15Pro extended UHF range - Update to version 20260529: * Fix RT-900 non-BT, increase to 999 channels. * Fix escape character in log message for UV-5R Mini - Update to version 20260522: * tdh8: Fix loading out-of-range group code values * baofeng_uv17Pro: Fix uploading over BLE for supported models * Add BLE serial detection * mp31: Add support for Baofeng MP31 - Update to version 20260515: * ha2: Fix defaulting empty memories to sane values - Update to version 20260508: * Don't complain about incompatible tones on import if no tone mode selected * ic2730: Add IC-2730E (European variant) support * ar8200: Add new driver for AOR AR8200 * Updated Italian Translation - Update to version 20260501: * tdh8: Fix VFO A/B BCL setting not reading properly * tdh8: Add offset dir in VFO settings and fix VFO TX freq * h777v4: Fix detected models - Update to version 20260425: * Use common "no response" exception in drivers * vx150: Add driver for Vertex Standard VX-150 * Update 935 and XS20 power handling * Fix 935/XS20 new channel creation * Fix exporting DV memories from RepeaterBook to CSV * TK7162: add initial support * tk8160: Fix upload clobbering memory * tk8160: Cleanup key definitions - Update to version 20260417: * Add Wouxun XS20 series channel memory support * Wouxun 935/8h series extra memory settings * TK-372G correct variants and names * Add BF-V12D support * Improve cache performance for RepeaterBook queries * Improve reliability of network source requests and bug reports * radtel_rt900: Fix flake8 E501 line too long in FHSS Code setting * radtel_rt900: Fix FHSS Code init crash on out-of-range image values * radtel_rt900: Expose FHSS Code per-channel setting * radtel_rt900: Expose LearnFHSS per-channel setting - Update to version 20260410: * Fix RB query for non-NA countries when translated * Update Turkish translation * Update Japanese translations * vx8: Fix 6.25kHz step channels being off frequency - Update to version 20260403: * Add common KenwoodToneModel and move a number of supported modeels to it * Add Baofeng UV-5RM Plus - Update to version 20260327: * Add Retevis C2 driver * Add Radioddity GS-10B * Updated Italian Translation * repeaterbook: Fix query parameters for RoW countries * Squash error about "unsure if rtone is valid" - Update to version 20260320: * Fix hiding Tone column on radios that support no tones * Add Radioddity DB40-G driver * Add support for Retevis HA2 model * ha1: Fix mem.duplex="off" setting * ha1: Fix dtmfsignalinglist * Add Radio Amateur Satellites query source, integrate it into the UI. * Move repeaterbook to cached/proxied service * Add Baofeng UV-28Plus - Update to version 20260313: * RT-910 non-BT increase channels to 960 for Fw V0.11 * RT-880G follow-up fixes * Fixed the issue of incorrect values for dtmfcomm and zoneinfo. - Update to version 20260306: * repeaterbook: Edits to country list * ha1g: Fix offset bank issue * Fix disabled item color in dark mode * Support Radtel RT880G - Update to version 20260227: * add Retevis RT21H * d7: Avoid breaking settings load for individual failures - Update to version 20260220: * Add TD-M11 test .img files * Add new models TIDRADIO TD-M11 22 FRS and TD-M11 16 PMR * th9800: Fix newer variant with short ident block * Add Baofeng GM-21 and Radioddity GM-30 Pro * Fix bulk-editing memories where empties are included * Baofeng GM-15Pro as subclass of Radioddity GM-30 * Update Japanese translation - Update to version 20260213: * Fix sorting confusing empty state of some rows * th9800: Fix crash while logging version mismatch * ft4: Fix clearing unknown memory regions * Update German translations - Update to version 20260206: * Add IARU R1 VHF/UHF bands to bandplan * kguv980p: Fix string comparison for power==None * Updated Italian, Spanish translations - Update to version 20260130: * uvk5: Improve read-only warning strategy * uvk5: Bless new found firmware versions 7.00.x * vx1: Fixes for compatibility * Update Italian Translation * Updated Spanish translation for "frequency out of range" message - Update to version 20260123: * Add Radioddity GM-30 Plus driver * btech: update default timeout for download/upload * f8hp-pro: Fix validate_memory for AM/aircraft * Account for start bits in baud calculation - Update to version 20260116: * Add support for Baofeng BF-F8HP PRO firmware v0.52 * BTech UV-25X2_G2 lengthen timeout when downloading * ha1g - Add bank support * anytone779: support sql_mode when setting - Update to version 20260109: * uv5r: Avoid breaking if VFOn frequency is invalid * support additional fingerprint for Retevis RT86S * support Retevis RB626 settings * Updated Translations * Fixes for 8.33kHz frequency and channel handling * Add VX1R driver - Update to version 20260102: * uv17Pro: Add new model UV-5G Mini * uv17pro: Refactor to support multiple idents * ha1g: Airband Support * Fix exporting CSV from drivers with negative specials - Update to version 20251219: * Fix test_clone to distinguish clone in/out * uv-k1: Add memory programming - Update to version 20251212: * tmd710: Fix failure to identify * tk11: Fix download/upload progress bar is not updating * translation updates - Update to version 20251205: * Add driver for Quansheng TK11 * Include Baofeng K63 and K6A in model mappings * Updated Spanish Translation - Update to version 20251128: * Fix mouseover error when setting is None * Fixes #12274 TD-H8 Gen 3, add missing MID to channel power settings * Update pt_BR translation - Update to version 20251121: * ha1g: Re-add scan/alarm/dtmf lists * ha1g: Check firmware compatibility during clone * retevis.py: add new ident fingerprint * dr135: Extend range to 174MHz - Update to version 20251106: * ha1g: Remove non-reentrant alarm/dtmf list code - ensure backwards compatibility for 15.6 - Use pyproject macros to build and install. - Update to version 20251031: * Remove Vertex Standard radio drivers * ft8800: Add settings support * anytone778uv: Fix duplex and tmode decode logging * tk760g: Fix long-standing typo in base class name * tk760g: Add odd TK-260G lower-p variant support * Update Italian Translation - Update to version 20251024: * th9800.py: Add Retevis_MA1 * Fix applying band defaults to immutable fields * Yaesu FT-1D, FT2D, FT3D fixes WiresX settings to handle all rooms in category * ft1d: multiple fixes * Added Retevis HA1G and HA1UV models * uvk5: Add new wild-found 1.02.x firmware blessing * Fix 8.33kHz step calculation * Update supported model list for Wouxun radios - Update to version 20251010: * Allow loading modules from additional states * tdh8: Remove forced NOAA channels at top of range * tdh8: Fix GMRS G3 detection * Fix export to CSV aborting on invalid memories * Fix writing CSVs with more than 1000 memories - Update to version 20251003: * uvk5: Fix step index list * bitwise: Add memory union support - Update to version 20250926: * Fix US Aviation Frequencies stock config mode * tdh8: Add support for TD-H8 Gen 3 * tdh8: Fix VFO offset setting - Update to version 20250912: * Add Retevis RA86 mobile radio * at779UV: Fix setting empty memories * thd74: multiple fixes * Fix column sort order with numeric values - Update to version 20250905: * tk270: Fix for python3 * bff8hppro: Fix high power level watts * ft8900: decouple from ft8800 * ft8800: fix memory issues * Updated Italian and Spanish translations * Improved autocomplete for memory structure objects - Update to version 20250829: * Add Baofeng UV-5R Mini * Add Retevis RT86S * Enable has_offset for Icom IC-7100 - Update to version 20250822: * Various models: Remove verbose debug logging and use trace instead * Add generic serial tracing for debug * Allow hexprint with variable line length - Update to version 20250815: * icv80: Fix duplex/tx-inhibit setting * add Baofeng BF-F8HP PRO firmware V0.44 support