CVE-2026-58704
Description
CVE-2026-58704 is a high-severity (8.8) privilege escalation flaw in Google Pixel cellular modems. CISA warns of active exploitation.
CPE
| Product | Version Start | Version End (excl.) | Status |
|---|---|---|---|
| android | - | - | vulnerable |
Related weakness (CWE)
Remediation plan
Apply official patches
Install the September 2026 (or later) Google Pixel security update immediately to address the logic error in the modem firmware.
Update affected systems
Ensure all Pixel devices running affected Android versions are updated to the latest security patch level provided in the Android Security Bulletin.
Restrict access
Minimize exposure by avoiding untrusted wireless networks and disabling unnecessary cellular features in high-risk environments until patches are applied.
Monitor for exploitation
Review device logs for unusual modem crashes or unauthorized privilege changes, and follow CISA's Forensics Triage Requirements for potentially compromised assets.
Detection Guidance
"Detection involves monitoring for anomalous cellular modem behavior, such as unexpected resets or unauthorized attempts to access system-level permissions. Security teams should inspect Android system logs (logcat) for errors related to the RIL (Radio Interface Layer) or modem firmware. Additionally, look for unusual traffic patterns on adjacent networks or unauthorized proximal connections that coincide with privilege escalation events on mobile endpoints."