Story perspectives

Google patches actively exploited Pixel modem flaw CVE-2026-58704

By Drooid · Sep 16, 2026, 10:30 PM UTC · How we work

Summary

Story summary

Google patched the actively exploited Pixel modem vulnerability CVE-2026-58704 in its September 2026 update.
The CVE-2026-58704 flaw enabled remote privilege escalation through a zero-click cellular-modem attack.
CISA added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog on September 16, 2026.
CISA required Federal Civilian Executive Branch agencies to install the patch by September 19, 2026.
The September update also fixed over 200 flaws, including 109 additional vulnerabilities, while Google gave no attacker details.

1 of 1

Story summary

Google patched the actively exploited Pixel modem vulnerability CVE-2026-58704 in its September 2026 update.
The CVE-2026-58704 flaw enabled remote privilege escalation through a zero-click cellular-modem attack.
CISA added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog on September 16, 2026.
CISA required Federal Civilian Executive Branch agencies to install the patch by September 19, 2026.
The September update also fixed over 200 flaws, including 109 additional vulnerabilities, while Google gave no attacker details.