https://vulnerability.circl.lu/sightings/feed 2026-09-18T03:28:57.054408+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5cfccdd1-8537-493d-8d0d-fe2ea5fb5fb4/export 2026-09-18T03:28:57.077781+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5cfccdd1-8537-493d-8d0d-fe2ea5fb5fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3182", "content": "\ud83d\udd34 Google fixes actively exploited Android zero-day on Pixel devices\n\nGoogle has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks.\n\n\"There are indications that CVE-2026-58704 may be under limited, targeted exploitation,\" the company warned on Wednesday.\n\n\"All supported Google devices will receive an update to the 2026-09-05 patch level. We encourage all customers to accept these updates to their devices.\"", "creation_timestamp": "2026-09-18T00:00:06.462175Z"} 2026-09-18T00:00:06.462175+00:00 https://vulnerability.circl.lu/sighting/8b39bc44-0773-4de2-8dba-e87cbdbfaf47/export 2026-09-18T03:28:57.080045+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8b39bc44-0773-4de2-8dba-e87cbdbfaf47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/boltx.mastodon.social.ap.brid.gy/post/3mvq7cmle6eb2", "content": "Hey @GrapheneOS do you happen to know when CVE-2026-58704 will be patched?\n\n(to clarify, tone is not meant to be passive aggressive, genuinely just curious)", "creation_timestamp": "2026-09-17T17:43:11.844246Z"} 2026-09-17T17:43:11.844246+00:00 https://vulnerability.circl.lu/sighting/1f528660-6e7c-413c-acc6-236c644b0336/export 2026-09-18T03:28:57.080172+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1f528660-6e7c-413c-acc6-236c644b0336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117287578991449161", "content": "\ud83d\udea8 Google confirms Pixel phones targeted in zero-click zero-day attacks\nGoogle has patched CVE-2026-58704, a high-severity vulnerability in Pixel phones' cellular modem that the company says was already under \"limited, targeted exploitation.\"\u2800The flaw is caused by a logic error that can allow an attacker to bypass permission checks and escalate privileges beyond the modem's isolated environment.\u2800Most importantly, exploitation requires no interaction from the victim.\nNo malicious link needs to be clicked and no file needs to be opened, making it a zero-click attack.\u2800Google has not disclosed:\n\u2022 Who carried out the attacks\u2022 How many Pixel owners were targeted\u2022 How the victims were selected\u2022 What tools or spyware may have been deployed\u2800CISA has added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog and set a September 19 remediation deadline for affected federal systems.\u2800Google says Pixel devices with the September 5, 2026 security patch level or later are protected.\nPixel owners should update their devices immediately.\nSource: https://techcrunch.com/2026/09/16/google-says-some-pixel-phone-owners-were-hacked-in-zero-day-attacks/", "creation_timestamp": "2026-09-17T17:33:48.092770Z"} 2026-09-17T17:33:48.092770+00:00 https://vulnerability.circl.lu/sighting/734f5d1f-fdf8-49e1-80ba-8f3516ac92b0/export 2026-09-18T03:28:57.080291+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "734f5d1f-fdf8-49e1-80ba-8f3516ac92b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mvpxipjyjh2c", "content": "Pixel owners hit by zero-day attack \ud83d\udcf1\n\nGoogle confirmed a zero-day, CVE-2026-58704, in Pixel modems was exploited in silent, zero-click attacks allowing privilege escalation, patched Tuesday. A zero-click modem exploit smells like state-sponsored activity.", "creation_timestamp": "2026-09-17T15:23:24.694889Z"} 2026-09-17T15:23:24.694889+00:00 https://vulnerability.circl.lu/sighting/19948bff-c50e-45f1-81bd-82c3c9b3675c/export 2026-09-18T03:28:57.080389+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "19948bff-c50e-45f1-81bd-82c3c9b3675c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvpx3qx77v2d", "content": "U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog\n\nThis article heavily emphasizes that CVE-2026-58704 is a remote privilege escalation flaw without requiring user interaction, yet it concludes by noting Google has not disclosed the s\u2026", "creation_timestamp": "2026-09-17T15:16:18.349809Z"} 2026-09-17T15:16:18.349809+00:00 https://vulnerability.circl.lu/sighting/e36ae6ab-f1ba-4544-9e66-aeff6ccb946b/export 2026-09-18T03:28:57.080484+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e36ae6ab-f1ba-4544-9e66-aeff6ccb946b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mvpwmwwhx22t", "content": "\u3010\u7dca\u6025\u3011Google Pixel \u306b\u8106\u5f31\u6027\uff08CVE-2026-58704 / CVSS 8.8\uff09\n\n\u30bb\u30eb\u30e9\u30fc\u30e2\u30c7\u30e0\u306e\u6a29\u9650\u30d0\u30a4\u30d1\u30b9\u3002Google\u306f\u300c\u9650\u5b9a\u7684\u304b\u3064\u6a19\u7684\u3092\u7d5e\u3063\u305f\u60aa\u7528\u306e\u5146\u5019\u304c\u3042\u308b\u300d\u3068\u660e\u8a18\u3002\n\u5bfe\u51e6: \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30ec\u30d9\u30eb\u30922026-09-05\u4ee5\u964d\u3078\u3002\n\nforsmile.jp/articles/goo...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-17T15:07:53.404760Z"} 2026-09-17T15:07:53.404760+00:00 https://vulnerability.circl.lu/sighting/a4b14712-f9e6-434b-8bba-99351df67e37/export 2026-09-18T03:28:57.080584+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a4b14712-f9e6-434b-8bba-99351df67e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58704", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvpujpnixs2t", "content": "Google's September 2026 Pixel update patches CVE-2026-58704, a modem zero-day under active exploitation. 110\u2026 https://0daynews.com/articles/2026-09-17-google-pixel-september-2026-modem-zero-day-cve-2026-58704/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2344", "creation_timestamp": "2026-09-17T14:30:17.809626Z"} 2026-09-17T14:30:17.809626+00:00 https://vulnerability.circl.lu/sighting/001f6a65-d8ec-421b-bd86-3ea226e4b4ad/export 2026-09-18T03:28:57.080676+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "001f6a65-d8ec-421b-bd86-3ea226e4b4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/techimo.bsky.social/post/3mvppitni6i2s", "content": "Google Pixel modems exploited by zero-day attack (CVE-2026-58704). Attackers gained access to phone data via modem, bypassing security without user interaction. Attack was limited & targeted.", "creation_timestamp": "2026-09-17T13:00:19.353337Z"} 2026-09-17T13:00:19.353337+00:00 https://vulnerability.circl.lu/sighting/0c15f7ca-336a-4568-b021-569aac11a053/export 2026-09-18T03:28:57.080768+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0c15f7ca-336a-4568-b021-569aac11a053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/android-adepts.bsky.social/post/3mvppi5nwil2u", "content": "\ud83d\udea8 Google Pixel phones hit by a \"zero-day\" attack! A vulnerability (CVE-2026-58704) in the Pixel modem was exploited, allowing attackers to access phone data without user interaction. Google has already patched the issue. Stay safe & update your devices! #GooglePixel #Cybersecurity #ZeroDay", "creation_timestamp": "2026-09-17T12:59:56.464364Z"} 2026-09-17T12:59:56.464364+00:00 https://vulnerability.circl.lu/sighting/7a13b470-41de-409b-b3c4-4bebece2017a/export 2026-09-18T03:28:57.080862+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7a13b470-41de-409b-b3c4-4bebece2017a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvpjs7rcrf2x", "content": "Here we go again with Google rushing out a patch for a high-severity Pixel Cellular Modem vulnerability, CVE-2026-58704. Those clutching affected Pixel devices now get to install updates to guard against attackers who already enjoyed privilege escalation in the wild. Why do we ev...\n\nRead full story", "creation_timestamp": "2026-09-17T11:18:11.059595Z"} 2026-09-17T11:18:11.059595+00:00