Google released September 2026 security updates for Pixel phones and fixed an actively exploited zero-day affecting supported devices. The flaw, CVE-2026-58704, is a high-severity permission bypass in the Cellular Modem component that can allow adjacent-network attackers to escalate privileges without user interaction; the Pixel bulletin also fixes 109 other vulnerabilities and ships at patch level 2026-09-05.
2026.09.16
97% relevant
This article updates the same underlying event by adding that CISA has placed CVE-2026-58704 in the KEV catalog, given federal agencies three days to patch, and describing the flaw as enabling zero-click attacks in Pixel cellular modems.
Eduard Kovacs
2026.09.16
98% relevant
This article is a direct update on the same event: Google’s patch for CVE-2026-58704. It adds that the flaw is a high-severity permission bypass in the Pixel cellular modem, requires no user interaction, can enable adjacent/proximal privilege escalation, and was exploited in limited targeted attacks.
info@thehackernews.com (The Hacker News)
2026.09.16
97% relevant
This article appears to cover the same underlying event: Google patching the actively exploited Pixel modem flaw CVE-2026-58704, adding that exploitation appears limited and targeted.
Sergiu Gatlan
2026.09.16
100% relevant
This article establishes a new tracked story around CVE-2026-58704, an actively exploited Pixel-specific zero-day fixed by Google in the September 2026 device update.