https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 18 Sep 2026 03:28:57 +0000 https://vulnerability.circl.lu/sighting/5cfccdd1-8537-493d-8d0d-fe2ea5fb5fb4/export {"uuid": "5cfccdd1-8537-493d-8d0d-fe2ea5fb5fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3182", "content": "\ud83d\udd34 Google fixes actively exploited Android zero-day on Pixel devices\n\nGoogle has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks.\n\n\"There are indications that CVE-2026-58704 may be under limited, targeted exploitation,\" the company warned on Wednesday.\n\n\"All supported Google devices will receive an update to the 2026-09-05 patch level. We encourage all customers to accept these updates to their devices.\"", "creation_timestamp": "2026-09-18T00:00:06.462175Z"} {"uuid": "5cfccdd1-8537-493d-8d0d-fe2ea5fb5fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3182", "content": "\ud83d\udd34 Google fixes actively exploited Android zero-day on Pixel devices\n\nGoogle has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks.\n\n\"There are indications that CVE-2026-58704 may be under limited, targeted exploitation,\" the company warned on Wednesday.\n\n\"All supported Google devices will receive an update to the 2026-09-05 patch level. We encourage all customers to accept these updates to their devices.\"", "creation_timestamp": "2026-09-18T00:00:06.462175Z"} https://vulnerability.circl.lu/sighting/5cfccdd1-8537-493d-8d0d-fe2ea5fb5fb4/export Fri, 18 Sep 2026 00:00:06 +0000 https://vulnerability.circl.lu/sighting/8b39bc44-0773-4de2-8dba-e87cbdbfaf47/export {"uuid": "8b39bc44-0773-4de2-8dba-e87cbdbfaf47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/boltx.mastodon.social.ap.brid.gy/post/3mvq7cmle6eb2", "content": "Hey @GrapheneOS do you happen to know when CVE-2026-58704 will be patched?\n\n(to clarify, tone is not meant to be passive aggressive, genuinely just curious)", "creation_timestamp": "2026-09-17T17:43:11.844246Z"} {"uuid": "8b39bc44-0773-4de2-8dba-e87cbdbfaf47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/boltx.mastodon.social.ap.brid.gy/post/3mvq7cmle6eb2", "content": "Hey @GrapheneOS do you happen to know when CVE-2026-58704 will be patched?\n\n(to clarify, tone is not meant to be passive aggressive, genuinely just curious)", "creation_timestamp": "2026-09-17T17:43:11.844246Z"} https://vulnerability.circl.lu/sighting/8b39bc44-0773-4de2-8dba-e87cbdbfaf47/export Thu, 17 Sep 2026 17:43:11 +0000 https://vulnerability.circl.lu/sighting/1f528660-6e7c-413c-acc6-236c644b0336/export {"uuid": "1f528660-6e7c-413c-acc6-236c644b0336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117287578991449161", "content": "\ud83d\udea8 Google confirms Pixel phones targeted in zero-click zero-day attacks\nGoogle has patched CVE-2026-58704, a high-severity vulnerability in Pixel phones' cellular modem that the company says was already under \"limited, targeted exploitation.\"\u2800The flaw is caused by a logic error that can allow an attacker to bypass permission checks and escalate privileges beyond the modem's isolated environment.\u2800Most importantly, exploitation requires no interaction from the victim.\nNo malicious link needs to be clicked and no file needs to be opened, making it a zero-click attack.\u2800Google has not disclosed:\n\u2022 Who carried out the attacks\u2022 How many Pixel owners were targeted\u2022 How the victims were selected\u2022 What tools or spyware may have been deployed\u2800CISA has added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog and set a September 19 remediation deadline for affected federal systems.\u2800Google says Pixel devices with the September 5, 2026 security patch level or later are protected.\nPixel owners should update their devices immediately.\nSource: https://techcrunch.com/2026/09/16/google-says-some-pixel-phone-owners-were-hacked-in-zero-day-attacks/", "creation_timestamp": "2026-09-17T17:33:48.092770Z"} {"uuid": "1f528660-6e7c-413c-acc6-236c644b0336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117287578991449161", "content": "\ud83d\udea8 Google confirms Pixel phones targeted in zero-click zero-day attacks\nGoogle has patched CVE-2026-58704, a high-severity vulnerability in Pixel phones' cellular modem that the company says was already under \"limited, targeted exploitation.\"\u2800The flaw is caused by a logic error that can allow an attacker to bypass permission checks and escalate privileges beyond the modem's isolated environment.\u2800Most importantly, exploitation requires no interaction from the victim.\nNo malicious link needs to be clicked and no file needs to be opened, making it a zero-click attack.\u2800Google has not disclosed:\n\u2022 Who carried out the attacks\u2022 How many Pixel owners were targeted\u2022 How the victims were selected\u2022 What tools or spyware may have been deployed\u2800CISA has added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog and set a September 19 remediation deadline for affected federal systems.\u2800Google says Pixel devices with the September 5, 2026 security patch level or later are protected.\nPixel owners should update their devices immediately.\nSource: https://techcrunch.com/2026/09/16/google-says-some-pixel-phone-owners-were-hacked-in-zero-day-attacks/", "creation_timestamp": "2026-09-17T17:33:48.092770Z"} https://vulnerability.circl.lu/sighting/1f528660-6e7c-413c-acc6-236c644b0336/export Thu, 17 Sep 2026 17:33:48 +0000 https://vulnerability.circl.lu/sighting/734f5d1f-fdf8-49e1-80ba-8f3516ac92b0/export {"uuid": "734f5d1f-fdf8-49e1-80ba-8f3516ac92b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mvpxipjyjh2c", "content": "Pixel owners hit by zero-day attack \ud83d\udcf1\n\nGoogle confirmed a zero-day, CVE-2026-58704, in Pixel modems was exploited in silent, zero-click attacks allowing privilege escalation, patched Tuesday. A zero-click modem exploit smells like state-sponsored activity.", "creation_timestamp": "2026-09-17T15:23:24.694889Z"} {"uuid": "734f5d1f-fdf8-49e1-80ba-8f3516ac92b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mvpxipjyjh2c", "content": "Pixel owners hit by zero-day attack \ud83d\udcf1\n\nGoogle confirmed a zero-day, CVE-2026-58704, in Pixel modems was exploited in silent, zero-click attacks allowing privilege escalation, patched Tuesday. A zero-click modem exploit smells like state-sponsored activity.", "creation_timestamp": "2026-09-17T15:23:24.694889Z"} https://vulnerability.circl.lu/sighting/734f5d1f-fdf8-49e1-80ba-8f3516ac92b0/export Thu, 17 Sep 2026 15:23:24 +0000 https://vulnerability.circl.lu/sighting/19948bff-c50e-45f1-81bd-82c3c9b3675c/export {"uuid": "19948bff-c50e-45f1-81bd-82c3c9b3675c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvpx3qx77v2d", "content": "U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog\n\nThis article heavily emphasizes that CVE-2026-58704 is a remote privilege escalation flaw without requiring user interaction, yet it concludes by noting Google has not disclosed the s\u2026", "creation_timestamp": "2026-09-17T15:16:18.349809Z"} {"uuid": "19948bff-c50e-45f1-81bd-82c3c9b3675c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvpx3qx77v2d", "content": "U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog\n\nThis article heavily emphasizes that CVE-2026-58704 is a remote privilege escalation flaw without requiring user interaction, yet it concludes by noting Google has not disclosed the s\u2026", "creation_timestamp": "2026-09-17T15:16:18.349809Z"} https://vulnerability.circl.lu/sighting/19948bff-c50e-45f1-81bd-82c3c9b3675c/export Thu, 17 Sep 2026 15:16:18 +0000 https://vulnerability.circl.lu/sighting/e36ae6ab-f1ba-4544-9e66-aeff6ccb946b/export {"uuid": "e36ae6ab-f1ba-4544-9e66-aeff6ccb946b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mvpwmwwhx22t", "content": "\u3010\u7dca\u6025\u3011Google Pixel \u306b\u8106\u5f31\u6027\uff08CVE-2026-58704 / CVSS 8.8\uff09\n\n\u30bb\u30eb\u30e9\u30fc\u30e2\u30c7\u30e0\u306e\u6a29\u9650\u30d0\u30a4\u30d1\u30b9\u3002Google\u306f\u300c\u9650\u5b9a\u7684\u304b\u3064\u6a19\u7684\u3092\u7d5e\u3063\u305f\u60aa\u7528\u306e\u5146\u5019\u304c\u3042\u308b\u300d\u3068\u660e\u8a18\u3002\n\u5bfe\u51e6: \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30ec\u30d9\u30eb\u30922026-09-05\u4ee5\u964d\u3078\u3002\n\nforsmile.jp/articles/goo...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-17T15:07:53.404760Z"} {"uuid": "e36ae6ab-f1ba-4544-9e66-aeff6ccb946b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mvpwmwwhx22t", "content": "\u3010\u7dca\u6025\u3011Google Pixel \u306b\u8106\u5f31\u6027\uff08CVE-2026-58704 / CVSS 8.8\uff09\n\n\u30bb\u30eb\u30e9\u30fc\u30e2\u30c7\u30e0\u306e\u6a29\u9650\u30d0\u30a4\u30d1\u30b9\u3002Google\u306f\u300c\u9650\u5b9a\u7684\u304b\u3064\u6a19\u7684\u3092\u7d5e\u3063\u305f\u60aa\u7528\u306e\u5146\u5019\u304c\u3042\u308b\u300d\u3068\u660e\u8a18\u3002\n\u5bfe\u51e6: \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30ec\u30d9\u30eb\u30922026-09-05\u4ee5\u964d\u3078\u3002\n\nforsmile.jp/articles/goo...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-17T15:07:53.404760Z"} https://vulnerability.circl.lu/sighting/e36ae6ab-f1ba-4544-9e66-aeff6ccb946b/export Thu, 17 Sep 2026 15:07:53 +0000 https://vulnerability.circl.lu/sighting/a4b14712-f9e6-434b-8bba-99351df67e37/export {"uuid": "a4b14712-f9e6-434b-8bba-99351df67e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58704", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvpujpnixs2t", "content": "Google's September 2026 Pixel update patches CVE-2026-58704, a modem zero-day under active exploitation. 110\u2026 https://0daynews.com/articles/2026-09-17-google-pixel-september-2026-modem-zero-day-cve-2026-58704/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2344", "creation_timestamp": "2026-09-17T14:30:17.809626Z"} {"uuid": "a4b14712-f9e6-434b-8bba-99351df67e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58704", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvpujpnixs2t", "content": "Google's September 2026 Pixel update patches CVE-2026-58704, a modem zero-day under active exploitation. 110\u2026 https://0daynews.com/articles/2026-09-17-google-pixel-september-2026-modem-zero-day-cve-2026-58704/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2344", "creation_timestamp": "2026-09-17T14:30:17.809626Z"} https://vulnerability.circl.lu/sighting/a4b14712-f9e6-434b-8bba-99351df67e37/export Thu, 17 Sep 2026 14:30:17 +0000 https://vulnerability.circl.lu/sighting/001f6a65-d8ec-421b-bd86-3ea226e4b4ad/export {"uuid": "001f6a65-d8ec-421b-bd86-3ea226e4b4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/techimo.bsky.social/post/3mvppitni6i2s", "content": "Google Pixel modems exploited by zero-day attack (CVE-2026-58704). Attackers gained access to phone data via modem, bypassing security without user interaction. Attack was limited & targeted.", "creation_timestamp": "2026-09-17T13:00:19.353337Z"} {"uuid": "001f6a65-d8ec-421b-bd86-3ea226e4b4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/techimo.bsky.social/post/3mvppitni6i2s", "content": "Google Pixel modems exploited by zero-day attack (CVE-2026-58704). Attackers gained access to phone data via modem, bypassing security without user interaction. Attack was limited & targeted.", "creation_timestamp": "2026-09-17T13:00:19.353337Z"} https://vulnerability.circl.lu/sighting/001f6a65-d8ec-421b-bd86-3ea226e4b4ad/export Thu, 17 Sep 2026 13:00:19 +0000 https://vulnerability.circl.lu/sighting/0c15f7ca-336a-4568-b021-569aac11a053/export {"uuid": "0c15f7ca-336a-4568-b021-569aac11a053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/android-adepts.bsky.social/post/3mvppi5nwil2u", "content": "\ud83d\udea8 Google Pixel phones hit by a \"zero-day\" attack! A vulnerability (CVE-2026-58704) in the Pixel modem was exploited, allowing attackers to access phone data without user interaction. Google has already patched the issue. Stay safe & update your devices! #GooglePixel #Cybersecurity #ZeroDay", "creation_timestamp": "2026-09-17T12:59:56.464364Z"} {"uuid": "0c15f7ca-336a-4568-b021-569aac11a053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/android-adepts.bsky.social/post/3mvppi5nwil2u", "content": "\ud83d\udea8 Google Pixel phones hit by a \"zero-day\" attack! A vulnerability (CVE-2026-58704) in the Pixel modem was exploited, allowing attackers to access phone data without user interaction. Google has already patched the issue. Stay safe & update your devices! #GooglePixel #Cybersecurity #ZeroDay", "creation_timestamp": "2026-09-17T12:59:56.464364Z"} https://vulnerability.circl.lu/sighting/0c15f7ca-336a-4568-b021-569aac11a053/export Thu, 17 Sep 2026 12:59:56 +0000 https://vulnerability.circl.lu/sighting/7a13b470-41de-409b-b3c4-4bebece2017a/export {"uuid": "7a13b470-41de-409b-b3c4-4bebece2017a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvpjs7rcrf2x", "content": "Here we go again with Google rushing out a patch for a high-severity Pixel Cellular Modem vulnerability, CVE-2026-58704. Those clutching affected Pixel devices now get to install updates to guard against attackers who already enjoyed privilege escalation in the wild. Why do we ev...\n\nRead full story", "creation_timestamp": "2026-09-17T11:18:11.059595Z"} {"uuid": "7a13b470-41de-409b-b3c4-4bebece2017a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvpjs7rcrf2x", "content": "Here we go again with Google rushing out a patch for a high-severity Pixel Cellular Modem vulnerability, CVE-2026-58704. Those clutching affected Pixel devices now get to install updates to guard against attackers who already enjoyed privilege escalation in the wild. Why do we ev...\n\nRead full story", "creation_timestamp": "2026-09-17T11:18:11.059595Z"} https://vulnerability.circl.lu/sighting/7a13b470-41de-409b-b3c4-4bebece2017a/export Thu, 17 Sep 2026 11:18:11 +0000