Google’s September 2026 Pixel update fixes 110 security flaws, including a modem bug that may already be used in limited, targeted attacks. Owners of supported Pixel phones should install the update and confirm a security patch level of September 5, 2026, or later.
This does not mean every unpatched Pixel can be taken over from anywhere on the internet. The available details indicate that an attacker needs access to an adjacent network and basic privileges on the phone, although Google has not explained how those privileges would first be obtained.
Update your Pixel now
Malwarebytes Labs reports that CVE-2026-58704 affects the cellular modem, the component that connects a phone to mobile networks for calls, texts and data. Google rates the flaw as high severity.- Open Settings > Security & privacy > System & updates > Security update.
- Tap Install, then restart the phone to finish applying the update.
- After restarting, check that the Android security update level is September 5, 2026, or later.
What the flaw could allow
The modem flaw is a permission bypass caused by a logic error. It could let an attacker with an existing foothold gain greater privileges without further user interaction.This does not mean every unpatched Pixel can be taken over from anywhere on the internet. The available details indicate that an attacker needs access to an adjacent network and basic privileges on the phone, although Google has not explained how those privileges would first be obtained.
