Users of WhatsApp are advised to review their settings and ensure they have the latest version of the application installed. Security experts have identified two significant software vulnerabilities in the widely used messaging platform. The vulnerabilities pertain to the handling of media files and attachments, as well as a specific issue affecting WhatsApp for Windows users.
Malwarebytes experts cautioned that although these flaws do not automatically infect devices, they could potentially facilitate social engineering attacks by cybercriminals or be combined with other vulnerabilities to pose more severe threats.
One of the vulnerabilities, known as CVE-2026-23866, and the other as CVE-2026-23863, were brought to light through Meta’s Bug Bounty program.
While there is currently no evidence of these vulnerabilities being exploited in real-world attacks or used for phone infections, WhatsApp has stated that they have not observed any exploitation in the wild.
However, to mitigate any potential risks, the Meta-owned company has issued an update and strongly advises users to review their settings. It is recommended that users ensure their WhatsApp application is fully updated on their devices to stay protected.
For Android users, updating WhatsApp can be done by accessing the Google Play Store, searching for WhatsApp Messenger, and selecting “Update.” iPhone users should open the App Store, tap on their profile icon, locate WhatsApp, and choose “Update.” Once the update is completed, devices will be safeguarded against future threats.
In related news, some older Android devices may soon lose access to WhatsApp entirely. According to WABetaInfo, WhatsApp intends to discontinue support for devices running versions older than Android 6 starting September 8, 2026. Affected users might receive a message stating that WhatsApp will cease to function on their devices later this year.
Although the majority of users are unlikely to be affected, as Android 6 was released in 2015 and is now seldom used on contemporary smartphones, it is essential for users to be aware of these potential changes.