CVE-2026-58704: Google Pixel

Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.

Vendor: Google
Product: Pixel
Vulnerability: Google Pixel Improper Authorization Vulnerability
Date added: Sep 16, 2026
CISA due date (U.S. federal agencies): Sep 19, 2026
Known ransomware campaign use: Unknown
Weakness (CWE): CWE-693

References

NVD — CVE-2026-58704
www.cisa.gov
www.cisa.gov
nvd.nist.gov

This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.

Last updated: Oct 4, 2026 17:31 UTC · Catalog version 2026.10.02