THREATOPS

THREAT OPS › CVEs › CVE-2026-58704

CVE-2026-58704 — Google Pixel Improper Authorization Vulnerability

CISA KEVExploited: confirmedGoogle

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.

Vulnerability details

Affected productsPixel
KEV remediation due2026-09-19

Related reporting

CISA Adds One Known Exploited Vulnerability to Catalogcisa_advisories
[CISA KEV] CVE-2026-58704 — Google Pixel: Google Pixel Improper Authorization Vulnerabilitycisa_kev
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitationthehackernews
Google Pixel owners urged to patch actively exploited modem flawmalwarebytes_blog