Users of WhatsApp are advised to review their settings and ensure they have the most recent version of the application installed due to the discovery of two security vulnerabilities. These vulnerabilities, identified as CVE-2026-23866 and CVE-2026-23863, were found by security experts through Meta’s Bug Bounty program. Although these flaws do not automatically infect devices, they could potentially be exploited by cybercriminals for social engineering attacks or in combination with other vulnerabilities to pose more significant threats.
Malwarebytes experts have highlighted that a malicious message could deceive a device into opening content from an untrusted source. WhatsApp has not observed any evidence of these vulnerabilities being exploited in real-world attacks or used to infect phones, but they have released an update to address these issues. The company strongly recommends users to verify their settings and ensure their WhatsApp application is up to date to stay protected.
To safeguard against potential threats, users should ensure that their WhatsApp application is fully updated on their devices. Android users can update WhatsApp by accessing the Google Play Store, searching for WhatsApp Messenger, and selecting “Update.” iPhone users can update WhatsApp by opening the App Store, tapping on their profile icon, scrolling to WhatsApp, and choosing “Update.” After updating, devices will be secure from future attacks.
In related news, some older Android devices may lose access to WhatsApp soon, as the messaging platform plans to end support for devices running versions earlier than Android 6 starting from September 8, 2026. Affected users may receive a message stating that WhatsApp will no longer function on their device later this year. However, this change is unlikely to impact most users, as Android 6 was released in 2015 and is not commonly used on modern smartphones.
