WhatsApp users are advised to review their settings and ensure they have the latest app version installed due to two identified security vulnerabilities. These vulnerabilities, affecting media file handling and Windows users, were flagged by Malwarebytes experts. While not automatically infecting devices, the flaws could facilitate social engineering attacks by cybercriminals.
The vulnerabilities, known as CVE-2026-23866 and CVE-2026-23863, were uncovered through Meta’s Bug Bounty program. There have been no reported real-world exploits or infections from these flaws according to WhatsApp, which has released an update urging users to verify their settings for added security.
To safeguard against potential threats, users should update WhatsApp on their devices. Android users can do this by accessing the Google Play Store, locating WhatsApp Messenger, and selecting “Update.” iPhone users should open the App Store, find WhatsApp, and choose “Update.”
In related news, some older Android devices may lose WhatsApp access soon, as the platform plans to discontinue support for devices running versions older than Android 6 starting September 8, 2026. Affected users might receive a notification indicating the impending loss of WhatsApp functionality on their devices. However, this change is unlikely to affect most users, as Android 6 is now outdated and seldom used on modern smartphones.