WhatsApp users are advised to review their settings and ensure they have the latest app version installed due to two security vulnerabilities identified by security experts. These vulnerabilities could potentially be exploited by cybercriminals for social engineering attacks or in combination with other vulnerabilities. The flaws, named CVE-2026-23866 and CVE-2026-23863, were discovered through Meta’s Bug Bounty program.
While there is currently no evidence of real-world exploitation or phone infections, WhatsApp has released an update as a precautionary measure. Users are strongly recommended to update their settings and make sure their WhatsApp is fully updated to stay protected.
To update WhatsApp on Android devices, users can access the Google Play Store, search for WhatsApp Messenger, and select “Update.” For iPhone users, updating can be done by opening the App Store, locating WhatsApp in the profile section, and selecting “Update.”
This warning coincides with the news that some older Android devices may lose WhatsApp support soon, with plans to end support for devices running versions older than Android 6 from September 8, 2026. Affected users may receive a notification indicating WhatsApp will no longer be functional on their devices.
Most users are unlikely to be affected as Android 6 was released in 2015 and is now less common on modern smartphones. Keeping WhatsApp updated is crucial to protect against potential security threats.
