Google Patches High-Severity Pixel Modem Zero-Day Exploited in Targeted Attacks

Google released its September 2026 Pixel security update patching a high-severity zero-day vulnerability tracked as CVE-2026-58704 with a CVSS score of 8.0. The vulnerability is located in the Pixel cellular modem and was exploited in limited, targeted attacks according to evidence found by Google. The security update addresses a large set of vulnerabilities in addition to this actively exploited modem flaw.