WhatsApp users are urged to review their settings and update to the latest version of the app following the discovery of two security vulnerabilities. Malwarebytes experts have identified flaws in how media files and attachments are managed, as well as an issue specifically affecting WhatsApp for Windows users.
While the vulnerabilities do not automatically infect devices, they could potentially be exploited by cybercriminals for social engineering attacks or combined with other vulnerabilities to pose more serious threats. These vulnerabilities, known as CVE-2026-23866 and CVE-2026-23863, were uncovered through Meta’s Bug Bounty program.
There is currently no evidence of these vulnerabilities being exploited in real-world attacks. WhatsApp has stated that they have not observed any exploitation in the wild. Nevertheless, the company has released an update and strongly advises users to verify their settings for enhanced security.
To safeguard against potential risks, users are advised to ensure that WhatsApp is fully updated on their devices. Android users can update the app via the Google Play Store by searching for WhatsApp Messenger and selecting “Update.” iPhone users should open the App Store, locate WhatsApp, and choose the “Update” option.
Following the update, devices will be shielded from future security threats. In related news, some older Android devices may soon lose access to WhatsApp as the platform plans to discontinue support for devices running versions older than Android 6 from September 8, 2026. Affected users may receive a message notifying them of this change.
Despite this, the impact is expected to be minimal as Android 6 was released in 2015 and is now seldom used on modern smartphones.