CVE-2026-28412

In Textream (macOS teleprompter), the DirectorServer WebSocket component imposes no limit on concurrent connections prior to version 1.5.1. A broadcast timer that pushes state to all connected clients every 100 ms enables an attacker to exhaust CPU and memory by flooding the server, causing the T...