Users of WhatsApp are advised to review their settings and ensure they are using the latest app version following the discovery of two significant software vulnerabilities by security researchers. These vulnerabilities affect how media files and attachments are handled, as well as WhatsApp for Windows users, potentially exposing devices to social engineering attacks. Although the flaws do not automatically infect devices, they could be exploited by cybercriminals in combination with other vulnerabilities.
The identified vulnerabilities, named CVE-2026-23866 and CVE-2026-23863, were disclosed through Meta’s Bug Bounty program. While there is no evidence of real-world exploitation or phone infections, WhatsApp has released an update to address the issues. Users are strongly advised to check their settings and ensure their WhatsApp is fully updated for protection.
To update WhatsApp on Android devices, users can go to the Google Play Store, search for WhatsApp Messenger, and select “Update.” iPhone users should open the App Store, navigate to WhatsApp under their profile, and choose “Update.” Once updated, devices will be safeguarded against potential attacks.
In related news, some older Android devices may lose access to WhatsApp soon, as the platform plans to discontinue support for devices running versions older than Android 6 starting from September 8, 2026. Affected users may receive a notification stating that WhatsApp will no longer work on their device. However, the impact is expected to be minimal, considering the rarity of Android 6 on modern smartphones.
