All WhatsApp users are being urged to check their settings and install the latest version of the app immediately after security researchers uncovered two new vulnerabilities. The flaws, which affect how media files are handled and impact Windows users, could leave devices open to cyberattacks.
WhatsApp Confirms New Vulnerabilities
Meta-owned WhatsApp has confirmed the existence of two software vulnerabilities, identified as CVE-2026-23866 and CVE-2026-23863. These were discovered through Meta's Bug Bounty programme. According to cybersecurity firm Malwarebytes, the flaws do not automatically infect devices but could enable criminals to carry out social engineering attacks or combine them with other exploits for more serious threats.
One vulnerability relates to how WhatsApp processes media files and attachments, while the other specifically affects WhatsApp for Windows. A malicious message could potentially trick a device into opening content from an untrusted source.
No Evidence of Exploitation Yet
At present, there is no evidence that either flaw has been exploited in real-world attacks. WhatsApp has stated that it has "not seen evidence of exploitation in the wild." Nevertheless, the company has released an update and strongly recommends users install it immediately to stay protected.
How to Update WhatsApp
To ensure your device is safe, follow these steps:
- Android users: Open the Google Play Store, search for WhatsApp Messenger, and tap "Update."
- iPhone users: Open the App Store, tap your profile icon, scroll to WhatsApp, and select "Update."
Once the update is installed, your phone will be protected from potential attacks exploiting these vulnerabilities.
Older Android Devices May Lose WhatsApp Access
This warning comes alongside news that some older Android devices may soon lose access to WhatsApp entirely. According to WABetaInfo, WhatsApp plans to end support for phones running versions older than Android 6 from September 8, 2026. Affected users may see a message stating: "Later this year, WhatsApp won't work on this device." However, most people are unlikely to be impacted, as Android 6 was released in 2015 and is now rarely used on modern smartphones.
