CVE-2026-50167 | kurrier-org Kurrier up to 1.2.3 [id].get.ts access control

August 18, 2026 Yanac

A vulnerability was found in kurrier-org Kurrier up to 1.2.3. It has been classified as problematic. The impacted element is an unknown function of the file apps/worker/server/routes/api/kurrier/webhooks/[id].get.ts. Performing a manipulation results in improper access controls.

This vulnerability was named CVE-2026-50167. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More