Security researchers have identified two critical vulnerabilities in WhatsApp that could potentially be exploited by cybercriminals to launch social engineering attacks or more serious threats. The flaws, known as CVE-2026-23866 and CVE-2026-23863, were discovered through Meta’s Bug Bounty program.
While there is no evidence of these vulnerabilities being used in real-world attacks, WhatsApp has released an update urging users to review their settings. To ensure protection, users are advised to update WhatsApp on their devices promptly.
Android users can update the app by accessing the Google Play Store and selecting the WhatsApp Messenger update option. For iPhone users, updating WhatsApp can be done through the App Store by selecting the update option under the WhatsApp profile.
By keeping WhatsApp up to date, users can safeguard their devices against potential security breaches. In related news, older Android devices running versions prior to Android 6 may soon lose access to WhatsApp from September 8, 2026. Affected users may receive a notification stating that WhatsApp will no longer be supported on their devices.
Although the impact is expected to be minimal, as Android 6 is an older version rarely found on modern smartphones, users are advised to stay informed about potential changes to their device’s compatibility with WhatsApp.