CVE-2026-28403 - Vulnerability Analysis

Overview

Textream < 1.5.1 contains a cross-origin WebSocket vulnerability caused by lack of Origin header validation in DirectorServer WebSocket server, letting malicious web pages remotely control teleprompter content, exploit requires victim to visit malicious web page in same browser session.

Severity & Score

Impact

Attackers can remotely control teleprompter content via WebSocket commands, potentially disrupting presentations or displaying malicious content.

Mitigation

Update to version 1.5.1 or later.

References

• https://github.com/f/textream/commit/f5ebad82750b9313386c34af8f0ede50c213a8a0
• https://github.com/f/textream/security/advisories/GHSA-wr3v-x247-337w

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 2, 2026

🟠 CVE-2026-28403 - High (7.6) Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.1:`) accepts connections from any origin without validating the HTTP `Origin` header during the WebSocket handshake. A maliciou... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28403/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner