EIP-2026-102814

This exploit leverages a vulnerability in xterm where the DECRQSS (Device Control Request Status String) feature improperly executes commands embedded in invalid DCS sequences. The PoC demonstrates command injection via a crafted escape sequence, which can be triggered by viewing a malicious log file or email.