https://numb3rs.re/tags/nday/Recent content in Nday on Numb3rs' blogHugoenMon, 05 Oct 2026 14:12:09 -0700https://numb3rs.re/posts/cve-2026-23866-finding-a-whatsapp-nday/Mon, 05 Oct 2026 14:12:09 -0700https://numb3rs.re/posts/cve-2026-23866-finding-a-whatsapp-nday/On May 1 2026, CVE-2026-23866 was published, the vulnerability reportedly allows a malicious attacker to force a victim into loading an arbitrary URL and thus leaking important information (headers, ip address, …). It’s a low grade vulnerability but I’ve never worked on Whatsapp so I figured it’d be interesting to take a look at it. The only informations I will be using are those publicly available on the NIST website .