Pixel Modem Flaw Allows Remote Attacks with No User Interaction

Google has issued an urgent warning to Pixel users regarding a serious security flaw in their phones' modems. The bug, tracked as CVE-2026-58704, allows attackers with access to adjacent or proximal networks to potentially exploit the logic error and gain higher-level access on targeted devices.

This high-severity vulnerability requires no user interaction and can be exploited remotely. Google has confirmed that attackers are actively exploiting this flaw and urges users to install the latest update as soon as possible.

The September 2026 Pixel security update patches a total of 110 vulnerabilities, including 12 bugs that could let attackers run malicious code remotely and 89 that could give them higher-level access. Pixel owners should check for the September 5th, 2026 patch level or later to ensure their device is up-to-date.

Google has not disclosed who is exploiting the vulnerability or who is being targeted, but warns that an attacker with access to an adjacent or proximal network could potentially exploit the logic error in the Pixel's cellular modem.