Google Pixel Vulnerability CVE-2026-58704 Exploited in Targeted Attacks

TL;DR

Google issued its monthly Pixel Update Bulletin on September 16, 2026, delivering patches for critical device weaknesses. Specifically, researchers discovered an actively targeted Google Pixel vulnerability residing within the cellular modem firmware. Threat actors are exploiting this security defect in targeted attacks to gain elevated system privileges. Consequently, device owners should install the latest software updates immediately.

Why This Threat Matters

Sourced estimates indicate that millions of consumers and enterprise professionals rely on Google Pixel smartphones worldwide. Therefore, security defects inside core hardware components expose personal communications to severe risks. If an attacker exploits this Google Pixel vulnerability, they can elevate privileges without warning. Attackers often deploy targeted zero-day exploits against high-profile individuals, journalists, and corporate executives. Google confirmed the ongoing threat, warning that “there are indications that CVE-2026-58704 may be under limited, targeted exploitation.”

How the Attack Works

The zero-day flaw, tracked as CVE-2026-58704, carries a CVSS score of 8.0. The bug exists directly inside the device’s cellular modem subcomponent. The advisory states, “In Cellular Modem, there is a possible permission bypass due to a logic error in the code.”

An attacker on an adjacent or proximal cellular network can trigger this logic error. The flaw allows remote privilege escalation without requiring prior access permissions. Furthermore, Google confirmed that “user interaction is not needed for exploitation.” In addition, the security bulletin addresses critical remote code execution bugs in telephony and modem services.

Affected Versions

This security vulnerability impacts all supported Google Pixel smartphones running firmware builds prior to September 2026. Google confirmed active, targeted exploitation in the wild. However, researchers have not published any public proof-of-concept exploit code.

Patch and Mitigation Steps

Pixel owners must update their devices to security patch level 2026-09-05 or later. You can initiate the update manually by navigating to Settings, selecting System, and tapping System update. For further technical details, review the official Pixel Update Bulletin. Users should enable automatic updates to ensure fast delivery of future security fixes.

×

Support Our Threat Intelligence

Find our vulnerability reports and weekly recaps helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee

PayPal

Select your plan

Free Pro Team

Hover over a plan to see its benefits.

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.