WhatsApp Multiple Vulnerabilities

Release Date: 6 May 2026

RISK: Medium Risk

TYPE: Clients - Im, Chat & Voip

Multiple vulnerabilities were identified in WhatsApp. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass and Spoofing on the targeted system.

---

Impact

• Security Restriction Bypass
• Spoofing

---

System / Technologies affected

• WhatsApp iOS prior to v2.25.8.0 to v2.26.15.72
• WhatsApp Android prior to v2.25.8.0 to v2.26.7.10
• WhatsApp for Windows prior to v2.3000.1032164386.258709

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to WhatsApp IOS version v2.26.15.72 or later
• Update to WhatsApp Android v2.26.7.10 or later
• Update to WhatsApp Windows v2.3000.1032164386.258709 or later

---

Vulnerability Identifier

• CVE-2026-23863
• CVE-2026-23866

---

Source

• WhatsApp

---

Related Link

• https://www.whatsapp.com/security/advisories/2026