https://numb3rs.re/Recent content on Numb3rs' blogHugoenMon, 05 Oct 2026 14:12:09 -0700https://numb3rs.re/posts/cve-2026-23866-finding-a-whatsapp-nday/Mon, 05 Oct 2026 14:12:09 -0700https://numb3rs.re/posts/cve-2026-23866-finding-a-whatsapp-nday/On May 1 2026, CVE-2026-23866 was published, the vulnerability reportedly allows a malicious attacker to force a victim into loading an arbitrary URL and thus leaking important information (headers, ip address, …). It’s a low grade vulnerability but I’ve never worked on Whatsapp so I figured it’d be interesting to take a look at it. The only informations I will be using are those publicly available on the NIST website .https://numb3rs.re/about/Mon, 01 Jan 0001 00:00:00 +0000https://numb3rs.re/about/About me. My name is Côme, I’m a 19 year old French student at Arizona State University, studying Computer Science and Philosophy. I played with different CTF teams as a pwner: ECSC Team France (Junior member in 2023 and 2024) World Wide Flag Shellphish (sometimes) Been working for 2 years on mobile security as a freelancer. I’m very interested in iOS security. CVEs N.B: I have no time to make such work public anymore, hence why I don’t have any recent one.