{"uuid": "1f528660-6e7c-413c-acc6-236c644b0336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117287578991449161", "content": "\ud83d\udea8 Google confirms Pixel phones targeted in zero-click zero-day attacks\nGoogle has patched CVE-2026-58704, a high-severity vulnerability in Pixel phones' cellular modem that the company says was already under \"limited, targeted exploitation.\"\u2800The flaw is caused by a logic error that can allow an attacker to bypass permission checks and escalate privileges beyond the modem's isolated environment.\u2800Most importantly, exploitation requires no interaction from the victim.\nNo malicious link needs to be clicked and no file needs to be opened, making it a zero-click attack.\u2800Google has not disclosed:\n\u2022 Who carried out the attacks\u2022 How many Pixel owners were targeted\u2022 How the victims were selected\u2022 What tools or spyware may have been deployed\u2800CISA has added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog and set a September 19 remediation deadline for affected federal systems.\u2800Google says Pixel devices with the September 5, 2026 security patch level or later are protected.\nPixel owners should update their devices immediately.\nSource: https://techcrunch.com/2026/09/16/google-says-some-pixel-phone-owners-were-hacked-in-zero-day-attacks/", "creation_timestamp": "2026-09-17T17:33:48.092770Z"}