NewsCompaniesFlawsGuides
Get the app
HighPartly fixedBeing used in attacksUpdated

Google Pixel modem zero-day CVE-2026-58704 fixed; wider device patch coverage unclear

Google fixed an exploited Pixel modem flaw that needs no user interaction or prior privileges. Install the latest Pixel update and check for security patch level 2026-09-05 or later. Fix coverage for other devices using affected Samsung chips is unconfirmed.

What to do

On a Pixel, open Settings → System → Software update and install the latest update; check that the Android security update date is 5 September 2026 or later. For another device using an affected Samsung chip, ask its manufacturer whether its firmware fixes CVE-2026-58704.

Check your devices
  • Google Pixelfixed in 2026-09-05 and later

What’s happening

Google disclosed CVE-2026-58704 on 15 September, warning of indications of limited, targeted exploitation. A logic error in the cellular modem can let a nearby attacker bypass permission checks and gain greater privileges without user interaction or existing privileges. Google rates it high severity and says Pixel security patch level 2026-09-05 or later addresses it. CISA confirmed exploitation by adding it to its catalogue the following day. The attackers and victim numbers have not been publicly identified in the sources reviewed. Samsung also lists affected Exynos processors and standalone modems in an advisory carrying a 23 September report date, but provides no fixed firmware versions or affected handset list. As at 3 November, Pixel remediation is documented; fix coverage across other devices using those chips remains unconfirmed.

What
Flaw
Affects
Google Pixel phones and Samsung Exynos cellular modems
Affected
Google Pixel modem component; Google does not identify individual affected models in its bulletin
Samsung Exynos 850, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W920, W930 and W1000 — EMM component
Samsung Modem 5123, 5300, 5400 and 5410 — EMM component
Fixed in
Google Pixel security patch level 2026-09-05 or later
CVE
CVE-2026-58704
Since
15 Sept 2026

Timeline

  1. UpdatePartly fixed

    Samsung's advisory records this as the report date and lists affected Exynos processors and standalone modems. It supplies no fixed firmware versions or device-level update list, leaving patch coverage beyond Pixel unconfirmed.

  2. CISA added

    CISA added the flaw to its Known Exploited Vulnerabilities catalogue, confirming its use in attacks. Its entry, reproduced by CIRCL, set a 19 September remediation deadline.

  3. Made publicFixed

    Google disclosed high-severity modem flaw CVE-2026-58704 and signs of limited, targeted exploitation. Pixel security patch level 2026-09-05 or later fixes it.

Sources

  1. Pixel Update Bulletin—September 2026Google · 15 Sept 2026
  2. CVE-2026-58704Samsung Semiconductor
  3. CISA Known Exploited Vulnerability Entry: CVE-2026-58704CIRCL, reproducing CISA · 16 Sept 2026
  4. CVE-2026-58704: Google CVE record and CISA assessmentCIRCL, reproducing Google and CISA · 16 Sept 2026
  5. Google confirms Pixel phones were exploited in ‘targeted’ attack related to modem9to5Google · 16 Sept 2026
  6. Google says some Pixel phone owners were hacked in zero-day attacksTechCrunch · 16 Sept 2026
  7. Learn when you'll get software updates on Google Pixel phonesGoogle
HARD Live follows this until it’s over: each change is added to the timeline with its source. Everything live · Everything from September 2026 · JSON · RSS