GoKawiilGoogle patches actively exploited Pixel modem zero-day in September update
Google's September 2026 security bulletin fixes 110 vulnerabilities in Pixel devices, including a high-severity flaw (CVE-2026-58704) in the Cellular Modem component that is being exploited in limited, targeted attacks. The bug stems from a logic error that lets an attacker on an adjacent network bypass permissions and escalate privileges without user interaction. The update, rolling out at patch level 2026-09-05, also addresses 12 critical remote code execution bugs and 89 privilege escalation issues.
GoKawiil's interpretation of the reporting above, not reported fact.
Modem-level flaws are especially dangerous because they can be triggered remotely over cellular or nearby wireless signals without any action from the victim, making them attractive for surveillance-style attacks. Since Pixel devices get patches separate from other Android OEMs due to Google's direct hardware control, this incident highlights how fragmented Android's update ecosystem remains even for flagship devices.
- CVE-2026-58704 is a modem-related zero-day already exploited in targeted attacks on Pixel devices.
- The flaw allows privilege escalation via proximal network access without user interaction.
- Users should manually check for and install the September 2026 patch through their device settings.
Google Pixel 9 Pro — Since Google is actively pushing critical security patches to Pixel devices, owning the latest Pixel ensures you're first in line for these timely fixes straight from the source. The Pixel 9 Pro also benefits from Google's tightest hardware-software integration, making security updates like this month's patch roll out smoothly and quickly.
See Google Pixel 9 Pro on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-16
Published there as: “Google fixes actively exploited Android zero-day on Pixel devices”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.