Users of WhatsApp are advised to review their settings and ensure they have the latest version of the app installed due to two security vulnerabilities recently identified in the platform. These vulnerabilities, one related to the handling of media files and attachments and another impacting WhatsApp for Windows users, were flagged by security researchers at Malwarebytes. Although these flaws do not automatically infect devices, they could potentially facilitate social engineering attacks by cybercriminals or be exploited in conjunction with other vulnerabilities for more severe threats.
Malicious messages could deceive devices into opening content from untrusted sources, as highlighted by the experts. The vulnerabilities, known as CVE-2026-23866 and CVE-2026-23863, were uncovered through Meta’s Bug Bounty program. WhatsApp has stated that there is currently no evidence of these vulnerabilities being exploited in real-world attacks.
However, as a precautionary measure, WhatsApp has issued an update and strongly recommends users to review their settings. To ensure their security, users should promptly update WhatsApp on their devices. For Android users, updating can be done through the Google Play Store by searching for WhatsApp Messenger and selecting “Update.” iPhone users can update by accessing the App Store, tapping on their profile icon, scrolling to WhatsApp, and choosing “Update.”
Once the update is completed, devices will be safeguarded against potential future attacks. In related news, older Android devices may face restrictions on WhatsApp access, with support ending for devices running versions older than Android 6 starting from September 8, 2026. Affected users may receive a notification indicating that WhatsApp will no longer function on their device later in the year. It is worth noting that the majority of users are unlikely to be impacted, as Android 6 is an older version released in 2015 and is now seldom used on modern smartphones.