144 lines
5.4 KiB
JSON
144 lines
5.4 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2026-23866",
|
||
"assignerOrgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "Meta",
|
||
"dateReserved": "2026-01-16T19:49:26.309Z",
|
||
"datePublished": "2026-05-01T16:02:03.304Z",
|
||
"dateUpdated": "2026-05-01T17:42:09.286Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"affected": [
|
||
{
|
||
"defaultStatus": "unaffected",
|
||
"product": "WhatsApp for Android",
|
||
"vendor": "Facebook",
|
||
"versions": [
|
||
{
|
||
"lessThan": "2.26.7.10",
|
||
"status": "affected",
|
||
"version": "2.25.8.0",
|
||
"versionType": "semver"
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"defaultStatus": "unaffected",
|
||
"product": "WhatsApp for iOS",
|
||
"vendor": "Facebook",
|
||
"versions": [
|
||
{
|
||
"lessThan": "2.26.15.72",
|
||
"status": "affected",
|
||
"version": "2.25.8.0",
|
||
"versionType": "semver"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"dateAssigned": "2026-04-20T00:00:00.000Z",
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggering OS-controlled custom URL scheme handlers. We have not seen evidence of exploitation in the wild."
|
||
}
|
||
],
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"description": "Improper Verification of Source of a Communication Channel (CWE-940)",
|
||
"lang": "en"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"providerMetadata": {
|
||
"orgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827",
|
||
"shortName": "Meta",
|
||
"dateUpdated": "2026-05-01T16:10:25.306Z"
|
||
},
|
||
"references": [
|
||
{
|
||
"tags": [
|
||
"x_refsource_CONFIRM"
|
||
],
|
||
"url": "https://www.facebook.com/security/advisories/cve-2026-23866"
|
||
},
|
||
{
|
||
"tags": [
|
||
"x_refsource_CONFIRM"
|
||
],
|
||
"url": "https://www.whatsapp.com/security/advisories/2026"
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "GENERAL"
|
||
}
|
||
],
|
||
"cvssV3_1": {
|
||
"version": "3.1",
|
||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C",
|
||
"baseScore": 4.3,
|
||
"baseSeverity": "MEDIUM"
|
||
}
|
||
}
|
||
]
|
||
},
|
||
"adp": [
|
||
{
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"type": "CWE",
|
||
"cweId": "CWE-940",
|
||
"lang": "en",
|
||
"description": "CWE-940 Improper Verification of Source of a Communication Channel"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2026-05-01T17:41:43.060585Z",
|
||
"id": "CVE-2026-23866",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "partial"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2026-05-01T17:42:09.286Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |