There’s a serious security fix hiding in Google’s September Pixel update

Credit: Adamya Sharma / Android Authority TL;DR Google’s September Pixel security update patches a cellular modem vulnerability that may have been used in limited, targeted attacks. CVE-2026-58704 could allow a remote attacker to bypass permission checks and escalate privileges without requiring any interaction from the victim. CISA has added the flaw to its Known Exploited Vulnerabilities list.