CVE-2026-28412 - Vulnerability Analysis
MediumCVSS: 6.5Last Updated: March 4, 2026
Textream - Denial of Service
Published: March 2, 2026Updated: March 4, 2026PoC AvailableRemote Exploitable
Overview
Textream macOS teleprompter app < 1.5.1 contains a denial of service caused by unlimited concurrent connections in DirectorServer WebSocket server combined with frequent broadcast timer, letting attackers exhaust CPU and memory, exploit requires network access.
Severity & Score
Severity: Medium
CVSS Score: 6.5
Impact
Attackers can exhaust CPU and memory, causing the application to freeze and crash during live sessions.
Mitigation
Update to version 1.5.1 or later.
References
Related Resources
Details
- CVE ID
- CVE-2026-28412
- Severity
- Medium
- CVSS Score
- 6.5
- Type
- denial_of_service
- Status
- confirmed
CWE
- CWE-400
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H