NPM · SEPTEMBER 2026 · EARLY WARNING

Google Pixel Cellular Modem Vulnerability CVE-2026-58704 Under Exploitation

EARLY WARNING · UNCONFIRMED. This page describes a developing threat that 0Day surfaced from early signals and has not yet independently confirmed. Details may change. Always verify against the primary sources before acting.
Severity
HIGH
CVSS
8
Affected component
pixel cellular modem (npm)
Patched version
Not yet available
CVE-2026-58704

An early warning has been issued for a high-severity security flaw in Google's Pixel Cellular Modem, tracked as CVE-2026-58704, which is reportedly being exploited in targeted attacks.

What happened

Google has disclosed a high-severity security flaw in its Pixel Cellular Modem, tracked as CVE-2026-58704. This vulnerability is a privilege escalation flaw due to a logic error in the code, which could allow remote escalation of privilege without additional execution privileges or user interaction. Google has acknowledged indications of limited, targeted exploitation of this vulnerability but has not disclosed further details about the attacks or the threat actor involved.

The flaw affects the Pixel Cellular Modem component. Google has issued patches for this and other vulnerabilities as part of its September 2026 Pixel updates. Users are advised to update their devices to security patch levels of 2026-09-05 or later to resolve the identified flaws.

What to do about it

How 0Day would have caught this

MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If pixel cellular modem is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Am I affected?

If you are using a Google Pixel device, you may be affected by this vulnerability. Consult the primary sources for more detailed information on affected components and version ranges.

What should I do right now?

Monitor for updates from Google and apply patches as they become available. Ensure your device is updated to the latest security patch levels.

Has this been exploited in the wild?

Yes, Google has acknowledged indications of limited, targeted exploitation of this vulnerability.

Sources

Join the 0Day waitlist →

← Back to all threats