CVE-2026-58704: Google Pixel Improper Authorization Vulnerability
Published Sep 15, 2026
·Updated
Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.
Other sources
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
— MITRE
Affected Software
2 affected components
Google Pixel
Google Android
Event History
Sep 15, 2026
CVE Published
via MITRE·06:34 PM
Data Sourced
via MITRE·06:34 PM
DescriptionWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeaknessAffected Software
Sep 16, 2026
Kev Listed
via CISA·12:00 AM
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What level of access and proximity does an attacker need?
An attacker needs low privileges and adjacent network access. No user interaction or additional execution privileges are required.
2
What could successful exploitation allow?
Successful exploitation could allow escalation of privilege and compromise confidentiality, integrity, and availability.