important · Mobile / Zero-click
Google reports targeted exploitation of a Pixel cellular-modem permission bypass.
Affects
Supported Google Pixel phones and tablets running Android with Google device firmware below the September 2026 patch level.
The path needs adjacent or proximal network reach and an unspecified low-privilege prerequisite, but no device-owner interaction; a modem logic error then bypasses permission checks.
Detail and 9 sources
We do not know the radio transaction, affected models, prerequisite privilege or destination privilege.
Chain to watch
Reach the Pixel modem from the required adjacent-network position→↓Trigger the permission-check bypass→↓Establish the privilege obtained→↓The radio trigger and both sides of the privilege transition remain undisclosed.
Unverified chainObtain incident forensics or Google's technical analysis identifying the protocol, modem generations and resulting context.
Sources
ResearchCVE-2026-58704 - Vulnerability Details - OpenCVEResearchhttps://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58704.jsonResearchCISA Adds One Known Exploited Vulnerability to Catalog | CISAResearchCVE-2026-58704 - Vulnerability-LookupResearchPixel Modem Zero-Day Exploited in Targeted Attacks - SecurityWeekResearchGoogle says some Pixel phone owners were hacked in zero-day attacks | TechCrunchVendorPixel Update Bulletin—September 2026 | Android Open Source ProjectVendorGoogle Pixel phones pwned in zero-click attacksVendorPixel Update Bulletin—September 2026 | Android Open Source Project