Cpe:2.3:a:iterm2:iterm2:*:*:*:*:*:*:*:*

A public proof-of-concept exploit for CVE-2026-123014 targets a NUL-byte argument injection vulnerability in the iTerm2 x-man-page URI handler, enabling arbitrary command execution via maliciously crafted links.