Google Pixel Modem Flaw Under Active Exploitation: Zero-Click Vulnerability Patched

A critical flaw in Google's Pixel cellular modem firmware has been identified and is reportedly under active exploitation. The bug, designated as CVE-2026-58704, is a zero-click privilege escalation vulnerability that allows an attacker to bypass permission checks and escalate privileges without any user interaction.

The issue resides beneath the operating system, in the modem's firmware layer, which handles cellular connectivity with implicit trust from the OS. This makes it difficult for security teams to detect and monitor, as they cannot easily inspect what the modem firmware is doing.

Google has patched the vulnerability, but there are indications that it may already be being exploited by attackers. The Cybersecurity and Infrastructure Security Agency added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog on September 16, 2026, prompting federal agencies to remediate within three days.