NewsCompaniesFlawsGuides
Get the app

Should you install the September 2026 Pixel update?

From Pixel updates, in the HARD wiki · Updated
This article is about one Pixel release. For the latest version, see Pixel updates.

No: install Pixel update October 2026 instead. Pixel update September 2026 is a security update Google released on 15 Sep 2026 for Google Pixel phones and tablets. It fixes 110 security flaws, 46 rated critical and 63 high by Google.[1] One of them is already being used in attacks.

It has since been replaced by Pixel update October 2026, released 6 Oct 2026, which includes all of its fixes. If you’re on an older version, install that instead.

Should you update?

No: install Pixel update October 2026 instead. Pixel update October 2026 came out on 6 Oct 2026 and includes every fix in Pixel update September 2026, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.

Is Pixel update September 2026 still safe?

Not any more. Pixel update October 2026 fixes 6 security flaws that Pixel update September 2026 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Settings → System → Software updates, never from a link in an email, text or pop-up.

What it fixes

Google lists 110 security flaws, 46 rated critical and 63 high by Google.[1] The 109 critical and high ones are:

FlawSeverityWhat Google calls it
CVE-2026-55318CriticalPixel, IP Multimedia Subsystem: RCE
CVE-2026-55343CriticalPixel, libpixelimsmedia: RCE
CVE-2026-56920CriticalPixel, VPU: RCE
CVE-2026-56967CriticalPixel, Modem: RCE
CVE-2026-58683CriticalPixel, Telephone: RCE
CVE-2026-58710CriticalPixel, BigOcean: RCE
CVE-2026-0179CriticalPixel, Bootloader: EoP
CVE-2026-0187CriticalPixel, GSA: EoP
CVE-2026-0192CriticalPixel, Bootloader: EoP
CVE-2026-0194CriticalPixel, Trusted Execution Environment: EoP
CVE-2026-0199CriticalPixel, Goodix Fingerprint TA: EoP
CVE-2026-0200CriticalPixel, Telephony: EoP
CVE-2026-55302CriticalPixel, Bootloader: EoP
CVE-2026-55317CriticalPixel, Bootloader: EoP
CVE-2026-55323CriticalPixel, Goodix Fingerprint TA: EoP
CVE-2026-55329CriticalPixel, Bootloader: EoP
CVE-2026-55337CriticalPixel, Bootloader: EoP
CVE-2026-55357CriticalPixel, CPM: EoP
CVE-2026-55359CriticalPixel, GPCA: EoP
CVE-2026-55364CriticalPixel, Bootloader: EoP
CVE-2026-55365CriticalPixel, Bootloader: EoP
CVE-2026-56891CriticalPixel, Trusted Execution Environment: EoP
CVE-2026-56922CriticalPixel, CPM: EoP
CVE-2026-56932CriticalPixel, Trusted Execution Environment: EoP
CVE-2026-56972CriticalPixel, Bootloader: EoP
CVE-2026-56973CriticalPixel, GDMC: EoP
CVE-2026-56974CriticalPixel, libpixelimsmedia: EoP
CVE-2026-56978CriticalPixel, Bootloader: EoP
CVE-2026-56985CriticalPixel, KeyMint: EoP
CVE-2026-56992CriticalPixel, AP ROM: EoP
and 79 more

Used in attacks

This fix closes a flaw that attackers were already using before the update came out, either on CISA’s list of flaws being used in attacks or in Google’s own words.[2]

How to update, and how long it takes

15 to 30 minutes, with one restart.

  1. Open Settings → System → Software updates → System update.Tap Check for update. Pixels usually get the month’s update in the first week.
  2. Install and restart.Download it, tap Restart now when it’s ready, and keep the phone charged above half.
  3. Install the Google Play system update too.Settings → Security & privacy → System & updates → Google Play system update.

To check it worked: Settings → About phone → Android version shows the “Android security update” date. It should say 2026-10-05 or later.

2026-08-05 vs 2026-09-05

Pixel update August 2026, released 4 Aug 2026, fixed 1 security flaw. Pixel update September 2026 fixes 110 security flaws and includes the fixes before it, so going straight to 2026-09-05 gets you both.

References

  1. ^ Google. “Pixel Update Bulletin, September 2026”, 15 Sep 2026.
  2. ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”.