CVE-2026-23866

{
  "id": "CVE-2026-23866",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-01T16:16:29.980",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggering OS-controlled custom URL scheme handlers. We have not seen evidence of exploitation in the wild."
    },
    {
      "lang": "es",
      "value": "Validación incompleta de mensajes de respuesta enriquecidos de IA para Instagram Reels en WhatsApp para iOS v2.25.8.0 a v2.26.15.72 y WhatsApp para Android v2.25.8.0 a v2.26.7.10 podría haber permitido a un usuario activar el procesamiento de contenido multimedia desde una URL arbitraria en el dispositivo de otro usuario, incluyendo la activación de manejadores de esquemas de URL personalizados controlados por el SO. No hemos visto evidencia de explotación en la naturaleza."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Facebook",
          "product": "WhatsApp for Android",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.25.8.0",
              "lessThan": "2.26.7.10",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Facebook",
          "product": "WhatsApp for iOS",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "2.25.8.0",
              "lessThan": "2.26.15.72",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-01T17:41:43.060585Z",
          "id": "CVE-2026-23866",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-940"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:android:*:*",
              "versionStartIncluding": "2.25.8.0",
              "versionEndIncluding": "2.26.7.10",
              "matchCriteriaId": "A9F5775D-2CBD-427C-94CD-D01C11559B06"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:iphone_os:*:*",
              "versionStartIncluding": "2.25.8.0",
              "versionEndIncluding": "2.26.15.72",
              "matchCriteriaId": "9C83C05F-A88D-48B7-8DE8-5B8CBD9FC6B9"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.facebook.com/security/advisories/cve-2026-23866",
      "source": "[email protected]",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://www.whatsapp.com/security/advisories/2026",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}