Product
A public proof-of-concept exploit for CVE-2026-123014 targets a NUL-byte argument injection vulnerability in the iTerm2 x-man-page URI handler, enabling arbitrary command execution via maliciously crafted links.