Google Patches Actively Exploited Pixel Modem Zero-Day CVE-2026-58704

Google has disclosed a high-severity vulnerability, CVE-2026-58704, affecting the cellular modem in Pixel devices, with evidence of limited targeted exploitation in the wild. The flaw involves a logic error that bypasses permission checks, allowing privilege escalation without requiring prior access or any user interaction. An attacker must be physically nearby or in adjacent range of the target device to exploit the vulnerability. Google addressed the issue in the September 5, 2026 security patch level, released as part of the September 2026 Pixel Update Bulletin. Users are advised to apply the update immediately and verify their device patch level is 2026-09-05 or later.