Search: CVE-2026-23866

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.5%	CVE-2026-23866Facebook WhatsApp for Android · Improper Verification of Source of a Communication Channel Medium4.3EPSS 0.5%2026-05-01CVE Database V5CVE-2026-23866 Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggering OS-controlled custom URL scheme handlers. We have not seen evidence of exploitation in the wild. EPSS 0.5%Vulnerability CWE-940	CVE Database V5	2026-05-01

Page 1 of 1 · 1 duplicate CVE record merged