{"vulnerability": "CVE-2026-5870", "sightings": [{"uuid": "dca3dba8-b6d2-4596-99f2-7b08f1a74e62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5870", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260409", "content": "", "creation_timestamp": "2026-04-08T18:00:00.000000Z"}, {"uuid": "b63f67ad-37a1-4b90-9a86-47cea11b78f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5870", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "75b32471-6ff2-4a95-87b8-557c0a1c0708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5870", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "5859d78e-0006-4f95-b374-681e248e4693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5870", "type": "seen", "source": "Telegram/KWuxeeHSuQ8XCG0I0PmdlmfWtMeROe19Mj_nJrMoKtHiv8c", "content": "", "creation_timestamp": "2026-04-13T18:01:00.000000Z"}, {"uuid": "4c72d4e1-7f92-43dd-b2c9-e37fd9a0ceb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5870", "type": "seen", "source": "Telegram/jIyNUYFMW3pmHfoq9aq6pUc_smYQ1DmvyBbDYJMLxbKNE0Y", "content": "", "creation_timestamp": "2026-04-13T18:00:38.000000Z"}, {"uuid": "2a135c48-16c5-414d-b720-4eefe9ffe2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5870", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/chromeos-multiple-vulnerabilities_20260428", "content": "", "creation_timestamp": "2026-04-27T20:00:00.000000Z"}, {"uuid": "0c109809-2ef8-46d8-b95f-c654fab27020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58704", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mvmqdpg2ld2u", "content": "\ud83d\udcf0 Google Perbaiki Zero-Day Android yang Aktif Dieksploitasi pada Perangkat Pixel\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/16/zero-day-android-pixel-cve-2026-58704/\n\n#android #cybersecurity #google #keamananSiber #pixel #rce #smartphone #vulnerability #zero-day", "creation_timestamp": "2026-09-16T08:37:21.252118Z"}, {"uuid": "7dca27d4-4637-42ea-a95e-51a8de0dde32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mvmvhfexad2z", "content": "A Pixel firmware bug lets an attacker on your same network escalate privileges without you clicking anything, CVE-2026-58704, and it's already being exploited. Google $GOOGL calls it limited and targeted, not mass exploitation, and hasn't said who's behind it. Patch level Sept 5 fixes it.", "creation_timestamp": "2026-09-16T10:08:54.205568Z"}, {"uuid": "47d641e1-5a80-4735-8d91-fb96b1b00309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvn2vu2ivl22", "content": "CVE-2026-58704 in Pixel Cellular Modem enables privilege escalation via permission bypass, with limited targeted exploitation indicated and no user interaction required.\n", "creation_timestamp": "2026-09-16T11:46:28.084988Z"}, {"uuid": "a0514483-dc97-4916-a9c8-80544ec4c2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvn2wgpui22g", "content": "CVE-2026-58704 in Pixel Cellular Modem enables privilege escalation via permission bypass, with limited targeted exploitation indicated and no user interaction required.\n", "creation_timestamp": "2026-09-16T11:46:47.370349Z"}, {"uuid": "960b246e-8498-427f-a5ed-72dd5ff18e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://t.me/thehackernews/10070", "content": "\u203c\ufe0f ALERT - Google says a Pixel modem flaw may be under limited, targeted exploitation.\n\nCVE-2026-58704 can enable adjacent privilege escalation without user interaction. Google patched it in the September Pixel update.\n\nWhat\u2019s known about the attacks \u2192 https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html", "creation_timestamp": "2026-09-16T13:00:05.608989Z"}, {"uuid": "4d0cb697-577d-489b-b372-e71d01be2625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-dispositivi-google-pixel-7", "content": "", "creation_timestamp": "2026-09-16T12:45:05.861033Z"}, {"uuid": "be7e0cdd-25c9-41a5-8802-234a70b4159d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html", "content": "Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw.\n\n\"In Cellular Modem, there is a possible permission bypass due to a logic error in the code,\" according to a description of the bug in the NIST National Vulnerability Database", "creation_timestamp": "2026-09-16T13:00:40.074371Z"}, {"uuid": "77130449-e1ef-45db-af02-ed55c7f2badc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvnabluabm2j", "content": "Google patched a high-severity Pixel modem zero-day (CVE-2026-58704) with limited targeted exploitation, enabling remote privilege escalation without user interaction.\n", "creation_timestamp": "2026-09-16T13:22:30.882934Z"}, {"uuid": "5d1954f0-3ed5-4dd7-b169-87a28bdb07f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvnacibsxi25", "content": "Google patched a high-severity Pixel modem zero-day (CVE-2026-58704) with limited targeted exploitation, enabling remote privilege escalation without user interaction.\n", "creation_timestamp": "2026-09-16T13:23:00.564677Z"}, {"uuid": "38f75a9f-1d28-4640-ad75-10d8ce229426", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/993d6267-11c4-4484-beb6-8a8ad8acfea8", "content": "", "creation_timestamp": "2026-09-16T14:00:02.022823Z"}, {"uuid": "e9228222-bf04-44ca-a9b9-61a8d945bfe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mvncfs5qs626", "content": "Pixel, Google chiude una falla zero-day nel modem gi\u00e0 sfruttata in attacchi\nGoogle corregge sui Pixel CVE-2026-58704, falla nel modem cellulare gi\u00e0 associata ad attacchi mirati. La pat...\nhttps://www.ilsoftware.it/google-pixel-zero-day-modem-attacchi/", "creation_timestamp": "2026-09-16T14:00:38.787884Z"}, {"uuid": "4d5a115f-73b5-44d7-bfe7-7b01c3b5ffb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvndxsnbv522", "content": "\ud83d\uded1 CVE-2026-58704\nGoogle Pixel\nCVSS 8.0 / KEV \u2705\nTL;DR: In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead\u2026\nhttps://cvesentinel.com/report/CVE-2026-58704?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-16T14:28:36.902340Z"}, {"uuid": "3022865d-0dd6-4baf-b639-bbe0c66b487a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvnexssgfk2t", "content": "Google has confirmed the active exploitation of a high-severity Android zero-day vulnerability (CVE-2026-58704) affecting Pixel smartphones, related to improper authorization in the device modem. This flaw allows attackers in radio proximity to escalate privileges without user interaction.", "creation_timestamp": "2026-09-16T14:46:31.506308Z"}, {"uuid": "7d0acc8a-73ad-4dbc-9534-5e5f14b38028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mvnfs6guxu2d", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916)\n\n\u26a0\ufe0f CVE-2026-58704 - Google Pixel Improper Authorization Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-09-16T15:01:15.499470Z"}, {"uuid": "e783964b-ae22-4b91-a45f-7253e83533fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/internoticies.pongo.cat/post/3mvnfspqxc72x", "content": "Google ha confirmat que alguns usuaris de tel\u00e8fons Pixel han estat objecte d'atacs cibern\u00e8tics dirigits a trav\u00e9s d'una vulnerabilitat zero-day en el m\u00f2dem del dispositiu, identificada com CVE-2026-58704.", "creation_timestamp": "2026-09-16T15:01:33.293855Z"}, {"uuid": "969c30a4-d0ab-4a00-894e-b2cef0dbd59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvnga24jkc2e", "content": "A Pixel modem software bug (CVE-2026-58704) enabled zero-click privilege escalation in targeted attacks and has been patched by Google.\n", "creation_timestamp": "2026-09-16T15:09:01.013937Z"}, {"uuid": "61694923-59e8-4de5-8757-426299f215b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/eudatabriefly.bsky.social/post/3mvnga3mllz2r", "content": "A Pixel modem software bug (CVE-2026-58704) enabled zero-click privilege escalation in targeted attacks and has been patched by Google.\n", "creation_timestamp": "2026-09-16T15:09:02.485692Z"}, {"uuid": "9e86c38c-203b-4ba2-ac84-5b2e5b25af5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvngakys3g2j", "content": "A Pixel modem software bug (CVE-2026-58704) enabled zero-click privilege escalation in targeted attacks and has been patched by Google.\n", "creation_timestamp": "2026-09-16T15:09:18.676060Z"}, {"uuid": "1a70f0aa-5670-4ddf-916a-01a958dae598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mvngr4opc32b", "content": "Pixel zero-day modem flaw CVE-2026-58704 exploited; patch out now #Security #Pixel #ZeroDay #ModemFlaw #AndroidSecurity #CVE-2026-58704 thedailytechfeed.com/google-confi...", "creation_timestamp": "2026-09-16T15:18:34.574230Z"}, {"uuid": "c38906b5-70ae-459a-83c0-29e97cc09d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mvnht2jpgs2e", "content": "CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-58704 Google Pixel Improper Authorization...\n\n\ud83d\udd17 https://www.cisa.gov/news-events/alerts/2026/09/16/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-16T15:37:32.206806Z"}, {"uuid": "64363a60-c1a8-4294-be58-25dc6db8597e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvni3kr52u2e", "content": "Pixel modem zero-day CVE-2026-58704 is being exploited in the wild and Google released a patch on 15 September \u2014 install the update now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-16T15:42:17.566917Z"}, {"uuid": "05ea59c5-2c95-4c57-8f4a-dc4d6410168a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/indirlab.com/post/3mvnitt7qdq2f", "content": "Google, Pixel telefonlarda tespit edilen ve etkile\u015fim gerektirmeyen zero-click g\u00fcvenlik a\u00e7\u0131\u011f\u0131 CVE-2026-58704 i\u00e7in yamay\u0131 yay\u0131nlad\u0131. G\u00fcncel kal\u0131n. \ud83d\udc47\nhttps://indirlab.com/haber/pixel-kullanicilarina-kritik-uyari-zero-click-saldirisi-tespit-edildi", "creation_timestamp": "2026-09-16T15:55:52.739418Z"}, {"uuid": "44693297-614a-4903-baab-fc390290c0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/", "content": "Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15. \n\nThe post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-16T16:00:42.728385Z"}, {"uuid": "a14970a0-b6ae-49dd-9c22-ee573a9b453b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnj575ybx2v", "content": "~Cisa~\nCISA added CVE-2026-58704 to its KEV Catalog after evidence of active exploitation.\n-\nIOCs: CVE-2026-58704\n-\n#CVE-2026-58704 #KEV #ThreatIntel", "creation_timestamp": "2026-09-16T16:01:06.395489Z"}, {"uuid": "86966c93-8d1c-4f52-899b-e7fc6df38ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58704", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117281559318718216", "content": "\ud83d\udcf0 Google Patches Actively Exploited Zero-Day Flaw in Pixel Modems\nGoogle patches high-severity zero-day (CVE-2026-58704) in Pixel modems. The flaw allows for remote privilege escalation and is under limited, targeted exploitation. CISA added to KEV. Update your Pixel now! #Pixel #Android #ZeroDay\n\ud83d\udd17 https://cyber.netsecops.io/articles/google-patches-actively-exploited-pixel-modem-zero-day-cve-2026-58704/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-16T16:03:05.799663Z"}, {"uuid": "fb9cba44-a049-4cb1-a3f2-506a8909f9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvnjc2k6k323", "content": "Google patches high-severity zero-day (CVE-2026-58704) in Pixel modems. The flaw allows for remote privilege escalation and is under limited, targeted exploitation. CISA added to KEV. Update your Pixel now! #Pixel #Android #ZeroDay\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-16T16:03:49.935621Z"}, {"uuid": "6c159351-bdaa-4234-8f70-1d7e76742ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/09/16/cisa-adds-one-known-exploited-vulnerability-catalog", "content": "", "creation_timestamp": "2026-09-16T16:15:02.422859Z"}, {"uuid": "499077ad-9edf-4a22-aa77-caf2e0a2eb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117281653436748936", "content": "New.\nPress release: New CISA Guidance Helps Critical Infrastructure Detect, Observe and Impede Malicious Cyber Activity https://www.cisa.gov/news-events/news/new-cisa-guidance-helps-critical-infrastructure-detect-observe-and-impede-malicious-cyber-activity\nThe guide: Using Cyber Decoys to Strengthen Detection and Response https://www.cisa.gov/resources-tools/resources/using-cyber-decoys-strengthen-detection-and-response\nCISA has also added one vulnerability to the catalogue.\nCVE-2026-58704: Google Pixel Improper Authorization Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-58704 #Google #infosec #vulnerability #CISA", "creation_timestamp": "2026-09-16T16:26:51.179211Z"}, {"uuid": "a6015fb2-da5d-4099-a809-99bdd35349e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvnqpumvlo2f", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-58704: Google Pixel Improper Authorization Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-58704", "creation_timestamp": "2026-09-16T18:16:49.153021Z"}, {"uuid": "fb8088f0-c3d3-47a9-a427-b9b266ba3a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mvnps2feo22q", "content": "Microsoft 365 SSO is throwing 5xx errors in the US/UK (MO1472904). Pixel CVE-2026-58704 is actively exploited\u2014install September updates. SteamOS NVIDIA driver reaches main tree. WinGet: uninstall by exact ID. Point-in-time restore also rolls back local files. +25 more stories; 49 joined", "creation_timestamp": "2026-09-16T18:00:11.684697Z"}, {"uuid": "0622f290-2cfd-4910-9610-e79668194b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnwnmrc2k2r", "content": "~Cybergcca~\nSeven advisories cover Android, Chrome, ICS, HPE, Oracle, Apple and BIND; CVE-2026-58704 is exploited in the wild.\n-\nIOCs: CVE-2026-58704\n-\n#CVE-2026-58704 #CyberSecurity #ThreatIntel", "creation_timestamp": "2026-09-16T20:02:56.757926Z"}, {"uuid": "01caf8d8-4766-4593-ba87-89712e895baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/android-security-advisory-september-2026-monthly-rollup-av26-920", "content": "", "creation_timestamp": "2026-09-16T20:15:02.626942Z"}, {"uuid": "fc5a2a1f-4ace-4ec8-b38c-9b3a6af936bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/whisprnews.bsky.social/post/3mvnygtan4n2p", "content": "\ud83d\udd12 #Google corrigi\u00f3 el CVE-2026-58704, un fallo de alta gravedad (CVSS 8.0) en el m\u00f3dem celular de los #Pixel, con indicios de explotaci\u00f3n dirigida. Permit\u00eda escalar privilegios sin interacci\u00f3n del usuario. Parche: 2026-09-05.", "creation_timestamp": "2026-09-16T20:34:59.810865Z"}, {"uuid": "eef38d57-06ba-4857-b1b3-a87a0adcfcfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvnzsuq5dv25", "content": "(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2026-58704 \u2013 Google Pixel Improper Authorization\u00a0Vulnerability\n\nActionable threat intelligence and end-to-end hardening strategies for CVE-2026-58704, addressing improper authorization flaws in Google Pixel cellular\u2026\n\nhttps://thecybermind.co/iuw6", "creation_timestamp": "2026-09-16T20:59:34.357006Z"}, {"uuid": "838d8633-3c24-4580-88b7-818316f2557a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/simonzerafa.infosec.exchange.ap.brid.gy/post/3mvo3fjxyhpp2", "content": "Google and CISA warned that an actively exploited zero-day vulnerability (CVE-2026-58704) affecting Pixel cellular modems.\n\nThis allows attackers to silently bypass permission checks and escalate privileges with no user interaction!\n\nIt was quickly added to CISA's Known Exploited Vulnerabilities [\u2026]", "creation_timestamp": "2026-09-16T21:30:35.958888Z"}, {"uuid": "f2b85245-5fe3-48e6-930f-4fef629ae865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvo3mzxgim2v", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-58704 \u2013 Google Pixel Improper Authorization\u00a0Vulnerability\n\nA strategic executive briefing detailing governance, risk mitigation, and compliance frameworks for CVE-2026-58704 on Google Pixel mobile devices....\n\nhttps://thecybermind.co/h86g", "creation_timestamp": "2026-09-16T21:32:05.165441Z"}, {"uuid": "3e73a433-4939-4383-9853-cc78955247d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvof25xduo2e", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f1\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA (Sep 16)\n\nCVE-2026-58704 Google Pixel\u306e\u4e0d\u9069\u5207\u306a\u8a8d\u8a3c\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-17T00:20:29.283034Z"}, {"uuid": "a306a650-41b4-4207-903c-9e3adab9e63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvofhde7ew2d", "content": "Google Pixel Vulnerability Exploited: CVE-2026-58704 Enables Zero-Click Privilege Escalation\uff08Google Pixel\u306e\u8106\u5f31\u6027CVE-2026-58704\u3001\u30bc\u30ed\u30af\u30ea\u30c3\u30af\u653b\u6483\u3067\u60aa\u7528\uff09 #SecurityOnline (Sep 16)\n\nsecurityonline.info/google-pixel...", "creation_timestamp": "2026-09-17T00:27:51.139637Z"}, {"uuid": "164ed1d8-a193-4c44-85fa-624ca5446c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://t.me/thehackernews/10070", "content": "\u203c\ufe0f ALERT - Google says a Pixel modem flaw may be under limited, targeted exploitation.\n\nCVE-2026-58704 can enable adjacent privilege escalation without user interaction. Google patched it in the September Pixel update.\n\nWhat\u2019s known about the attacks \u2192 https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html", "creation_timestamp": "2026-09-17T01:00:04.255357Z"}, {"uuid": "4e0fea2d-5742-474d-9990-cb43be0abeb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html", "content": "Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw.\n\n\"In Cellular Modem, there is a possible permission bypass due to a logic error in the code,\" according to a description of the bug in the NIST National Vulnerability Database", "creation_timestamp": "2026-09-17T01:00:36.798434Z"}, {"uuid": "64fea34b-ee3b-4ba8-bc4e-aac385e02cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/", "content": "Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15. \n\nThe post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:37.182629Z"}, {"uuid": "6ea4f3f6-b2d1-4d2b-b1f4-0255931c3645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvokyu3kby2v", "content": "\ud83d\udccc CVE-2026-58704 - In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of... https://www.cyberhub.blog/cves/CVE-2026-58704", "creation_timestamp": "2026-09-17T02:07:08.373878Z"}, {"uuid": "09ecf035-20cb-4b86-b102-25538d18bfd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvorq4qcuz2z", "content": "Google confirmed a Pixel modem zero-day (CVE-2026-58704) exploited in a zero-click spyware attack to escape the modem sandbox. Update now.\n\n#Pixel #ZeroDay #CVE202658704 #Google #Spyware #ZeroClick #CyberSecurity", "creation_timestamp": "2026-09-17T04:07:31.108429Z"}, {"uuid": "afcdcd06-74fa-4c82-bd81-2f4f5d642826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/newsanalysis.com/post/3mvosaiafoh27", "content": "Google Pixel phones were targeted by zero-click attacks exploiting a cellular modem vulnerability (CVE-2026-58704). This flaw allowed privilege escalation without user interaction. The vulnerability has since been patched. Ensure your device is updated. #cybersecurity #News", "creation_timestamp": "2026-09-17T04:16:40.674324Z"}, {"uuid": "c4d318ad-83ad-40e9-962d-eb9662562722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvozqfpukv2c", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-58704: \u26a0\ufe0f CVE-2026-58704: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.1%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-58704-in-cellular-modem-there-is-a", "creation_timestamp": "2026-09-17T06:30:50.556818Z"}, {"uuid": "2939a977-96e6-473f-b27d-74d90f43eb5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mvp2tkvpik2c", "content": "Your pocket radio's soft, Morty. Google's September Pixel bulletin flags CVE-2026-58704\u2014cellular modem permission bypass, maybe already in limited targeted attacks, zero taps needed. Patch to 2026-09-05. Schmeckles well spent. day260.012", "creation_timestamp": "2026-09-17T06:50:35.248310Z"}, {"uuid": "1b1e6223-b797-4ad3-a8d5-aba5e1d03a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mvp3uazf6ckf", "content": "Google Pixel\u30b9\u30de\u30fc\u30c8\u30d5\u30a9\u30f3\u304c\u30bc\u30ed\u30af\u30ea\u30c3\u30af\u653b\u6483\u306e\u6a19\u7684\u306b\uff08CVE-2026-58704\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47781/", "creation_timestamp": "2026-09-17T07:08:48.243036Z"}, {"uuid": "3b0d0efd-d326-4d7f-ae33-c3011462eda3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/205d0b98-2c28-42a6-8044-942eb89ba636", "content": "", "creation_timestamp": "2026-09-17T09:00:32.497722Z"}, {"uuid": "0335e359-36f9-4e76-89e4-a922efe97261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58704", "type": "seen", "source": "https://bsky.app/profile/gadgetchecks.bsky.social/post/3mvpfxg2f452z", "content": "PIXEL-MODEM-L\u00dcCKE CVE-2026-58704 WIRD GEZIELT AUSGENUTZT\n\nhttps://gadgetchecks.de/pixel-modem-luecke-cve-2026-58704-wird-gezielt-ausgenutzt/\n\n#technikaktuell #googlepixel #android #sicherheitsupdate #cybersicherheit #gadgetchecks", "creation_timestamp": "2026-09-17T10:09:30.929818Z"}, {"uuid": "41d7bce4-61d9-4802-8201-f3a19e702936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvphq3gckc2d", "content": "Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation\n\nGoogle has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T10:41:12.619719Z"}, {"uuid": "f17b9a68-6dfa-4057-81e2-e35f14c91910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://t.me/pphm_HackerNews/3182", "content": "\ud83d\udd34 Google fixes actively exploited Android zero-day on Pixel devices\n\nGoogle has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks.\n\n\"There are indications that CVE-2026-58704 may be under limited, targeted exploitation,\" the company warned on Wednesday.\n\n\"All supported Google devices will receive an update to the 2026-09-05 patch level. We encourage all customers to accept these updates to their devices.\"", "creation_timestamp": "2026-09-17T11:00:04.487270Z"}, {"uuid": "c1fb7a32-69a8-43af-abfc-d43c8f6cfd74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvpjs5hx6w25", "content": "Google found its Pixel modem flaw CVE-2026-58704 being exploited in the wild, because of course it was. Just another Tuesday in IT patching.\n\n#patchtuesday #herewegoagain", "creation_timestamp": "2026-09-17T11:18:08.639320Z"}, {"uuid": "7a13b470-41de-409b-b3c4-4bebece2017a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvpjs7rcrf2x", "content": "Here we go again with Google rushing out a patch for a high-severity Pixel Cellular Modem vulnerability, CVE-2026-58704. Those clutching affected Pixel devices now get to install updates to guard against attackers who already enjoyed privilege escalation in the wild. Why do we ev...\n\nRead full story", "creation_timestamp": "2026-09-17T11:18:11.059595Z"}, {"uuid": "0c15f7ca-336a-4568-b021-569aac11a053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/android-adepts.bsky.social/post/3mvppi5nwil2u", "content": "\ud83d\udea8 Google Pixel phones hit by a \"zero-day\" attack! A vulnerability (CVE-2026-58704) in the Pixel modem was exploited, allowing attackers to access phone data without user interaction. Google has already patched the issue. Stay safe & update your devices! #GooglePixel #Cybersecurity #ZeroDay", "creation_timestamp": "2026-09-17T12:59:56.464364Z"}, {"uuid": "001f6a65-d8ec-421b-bd86-3ea226e4b4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/techimo.bsky.social/post/3mvppitni6i2s", "content": "Google Pixel modems exploited by zero-day attack (CVE-2026-58704). Attackers gained access to phone data via modem, bypassing security without user interaction. Attack was limited & targeted.", "creation_timestamp": "2026-09-17T13:00:19.353337Z"}, {"uuid": "a4b14712-f9e6-434b-8bba-99351df67e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58704", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvpujpnixs2t", "content": "Google's September 2026 Pixel update patches CVE-2026-58704, a modem zero-day under active exploitation. 110\u2026 https://0daynews.com/articles/2026-09-17-google-pixel-september-2026-modem-zero-day-cve-2026-58704/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2344", "creation_timestamp": "2026-09-17T14:30:17.809626Z"}, {"uuid": "e36ae6ab-f1ba-4544-9e66-aeff6ccb946b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mvpwmwwhx22t", "content": "\u3010\u7dca\u6025\u3011Google Pixel \u306b\u8106\u5f31\u6027\uff08CVE-2026-58704 / CVSS 8.8\uff09\n\n\u30bb\u30eb\u30e9\u30fc\u30e2\u30c7\u30e0\u306e\u6a29\u9650\u30d0\u30a4\u30d1\u30b9\u3002Google\u306f\u300c\u9650\u5b9a\u7684\u304b\u3064\u6a19\u7684\u3092\u7d5e\u3063\u305f\u60aa\u7528\u306e\u5146\u5019\u304c\u3042\u308b\u300d\u3068\u660e\u8a18\u3002\n\u5bfe\u51e6: \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30ec\u30d9\u30eb\u30922026-09-05\u4ee5\u964d\u3078\u3002\n\nforsmile.jp/articles/goo...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-17T15:07:53.404760Z"}, {"uuid": "19948bff-c50e-45f1-81bd-82c3c9b3675c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvpx3qx77v2d", "content": "U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog\n\nThis article heavily emphasizes that CVE-2026-58704 is a remote privilege escalation flaw without requiring user interaction, yet it concludes by noting Google has not disclosed the s\u2026", "creation_timestamp": "2026-09-17T15:16:18.349809Z"}, {"uuid": "734f5d1f-fdf8-49e1-80ba-8f3516ac92b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mvpxipjyjh2c", "content": "Pixel owners hit by zero-day attack \ud83d\udcf1\n\nGoogle confirmed a zero-day, CVE-2026-58704, in Pixel modems was exploited in silent, zero-click attacks allowing privilege escalation, patched Tuesday. A zero-click modem exploit smells like state-sponsored activity.", "creation_timestamp": "2026-09-17T15:23:24.694889Z"}, {"uuid": "1f528660-6e7c-413c-acc6-236c644b0336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117287578991449161", "content": "\ud83d\udea8 Google confirms Pixel phones targeted in zero-click zero-day attacks\nGoogle has patched CVE-2026-58704, a high-severity vulnerability in Pixel phones' cellular modem that the company says was already under \"limited, targeted exploitation.\"\u2800The flaw is caused by a logic error that can allow an attacker to bypass permission checks and escalate privileges beyond the modem's isolated environment.\u2800Most importantly, exploitation requires no interaction from the victim.\nNo malicious link needs to be clicked and no file needs to be opened, making it a zero-click attack.\u2800Google has not disclosed:\n\u2022 Who carried out the attacks\u2022 How many Pixel owners were targeted\u2022 How the victims were selected\u2022 What tools or spyware may have been deployed\u2800CISA has added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog and set a September 19 remediation deadline for affected federal systems.\u2800Google says Pixel devices with the September 5, 2026 security patch level or later are protected.\nPixel owners should update their devices immediately.\nSource: https://techcrunch.com/2026/09/16/google-says-some-pixel-phone-owners-were-hacked-in-zero-day-attacks/", "creation_timestamp": "2026-09-17T17:33:48.092770Z"}, {"uuid": "8b39bc44-0773-4de2-8dba-e87cbdbfaf47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/boltx.mastodon.social.ap.brid.gy/post/3mvq7cmle6eb2", "content": "Hey @GrapheneOS do you happen to know when CVE-2026-58704 will be patched?\n\n(to clarify, tone is not meant to be passive aggressive, genuinely just curious)", "creation_timestamp": "2026-09-17T17:43:11.844246Z"}, {"uuid": "5cfccdd1-8537-493d-8d0d-fe2ea5fb5fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3182", "content": "\ud83d\udd34 Google fixes actively exploited Android zero-day on Pixel devices\n\nGoogle has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks.\n\n\"There are indications that CVE-2026-58704 may be under limited, targeted exploitation,\" the company warned on Wednesday.\n\n\"All supported Google devices will receive an update to the 2026-09-05 patch level. We encourage all customers to accept these updates to their devices.\"", "creation_timestamp": "2026-09-18T00:00:06.462175Z"}, {"uuid": "446deed0-df8d-44e4-9b4f-546d8c33d3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "Telegram/1M6_8mRBWPuXdxY6ltDCR5rWn0jOyQP0i_UZREVpg5BB0Q", "content": "", "creation_timestamp": "2026-09-18T04:00:05.744014Z"}, {"uuid": "7848fab8-5753-46dd-a779-979692bc8e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mvricsiqbs2w", "content": "Google Pixel : zero-day CVE-2026-58704 exploit\u00e9 en attaques cibl\u00e9es \u2014 RCE sans action de la victime. https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1176/\nNextcloud Server : faille RCE critique corrig\u00e9e. https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1198/", "creation_timestamp": "2026-09-18T05:56:59.698776Z"}, {"uuid": "ec3769b8-03ce-4924-a462-edf2cba05c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvrkgvh6cb2s", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 48 interactions\nCVE-2026-76460: 18 interactions\nCVE-2026-76461: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58704: 10 interactions\nCVE-2026-76460: 8 interactions\nCVE-2023-28252: 3 interactions\n", "creation_timestamp": "2026-09-18T06:35:06.707870Z"}, {"uuid": "f3cd3728-b317-4000-9d11-31c9ba45f17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://t.me/xhqcankao/32037", "content": "\u8c37\u6b4c\u8868\u793a\u90e8\u5206Pixel\u624b\u673a\u7528\u6237\u5728\u96f6\u65e5\u6f0f\u6d1e\u653b\u51fb\u4e2d\u906d\u5230\u9ed1\u5ba2\u5165\u4fb5\n\n\u8c37\u6b4c\u5468\u4e8c\u8868\u793a\uff0c\u5176Pixel\u667a\u80fd\u624b\u673a\u8f6f\u4ef6\u4e2d\u7684\u4e00\u4e2a\u6f0f\u6d1e\u5728\u6709\u9650\u4e14\u6709\u9488\u5bf9\u6027\u7684\u7f51\u7edc\u653b\u51fb\u4e2d\u906d\u5230\u4e86\u5229\u7528\u3002\u8fd9\u4e2a\u88ab\u8ffd\u8e2a\u4e3aCVE-2026-58704\u7684\u6f0f\u6d1e\u73b0\u5df2\u5f97\u5230\u4fee\u8865\u3002\u6839\u636e\u6709\u5173\u8be5\u6f0f\u6d1e\u7684\u6709\u9650\u7ec6\u8282\uff0c\u8be5\u6f0f\u6d1e\u662f\u5728Pixel\u624b\u673a\u7684\u8c03\u5236\u89e3\u8c03\u5668\u4e2d\u53d1\u73b0\u7684\uff0c\u8c03\u5236\u89e3\u8c03\u5668\u4f7f\u8bbe\u5907\u8fde\u63a5\u4e92\u8054\u7f51\u3002\u5229\u7528\u8be5\u6f0f\u6d1e\u53ef\u80fd\u5141\u8bb8\u653b\u51fb\u8005\u7a81\u7834\u8c03\u5236\u89e3\u8c03\u5668\u7684\u6c99\u7bb1\u9694\u79bb\u5c4f\u969c\uff0c\u8bbf\u95ee\u624b\u673a\u66f4\u5e7f\u6cdb\u7684\u6570\u636e\uff0c\u8fd9\u662f\u4e00\u79cd\u88ab\u79f0\u4e3a\u7279\u6743\u63d0\u5347\u7684\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u53ef\u4ee5\u5728\u6240\u8c13\u7684 \u201c\u96f6\u70b9\u51fb\u201d\u653b\u51fb\u4e2d\u88ab\u9759\u9ed8\u5229\u7528\uff0c\u4e14\u65e0\u9700\u624b\u673a\u6240\u6709\u8005\u4efb\u4f55\u4ea4\u4e92\uff0c\u8fd9\u610f\u5473\u7740\u53d7\u5bb3\u8005\u4e0d\u9700\u8981\u70b9\u51fb\u94fe\u63a5\u6216\u6253\u5f00\u6587\u4ef6\u3002\n\n\u2014\u2014 Techcrunch", "creation_timestamp": "2026-09-18T08:00:07.386012Z"}, {"uuid": "5030c495-0695-44e7-a47e-747d0dc2981f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvru7wmjyy2n", "content": "\ud83d\udce2 [VULN] Google confirme un piratage des Pixel via une faille du modem - CVE-2026-58704\n\nGoogle a confirm\u00e9 que ses smartphones Pixel ont \u00e9t\u00e9 pirat\u00e9s \u00e0 la suite d\u2019attaques cibl\u00e9es exploitant une faille de type zero-day dans le modem.\n\n#ZeroDay #CVE #Cyberveille", "creation_timestamp": "2026-09-18T09:30:08.483764Z"}, {"uuid": "f5f93e10-0998-4496-879d-733618188a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvrvph7nfy2i", "content": "CVE-2026-58704 was exploited in Pixel cellular modems before fixes, enabling privilege escalation without user interaction; CISA ordered federal agencies to patch within three days.\n", "creation_timestamp": "2026-09-18T09:56:43.364659Z"}, {"uuid": "eb20924d-ac85-43fd-8a10-1a62d587e36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvrvrbstpa22", "content": "CVE-2026-58704 was exploited in Pixel cellular modems before fixes, enabling privilege escalation without user interaction; CISA ordered federal agencies to patch within three days.\n", "creation_timestamp": "2026-09-18T09:57:44.621805Z"}, {"uuid": "9f52789f-5a69-4578-bceb-096d46f4caff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvrvrcvjun2z", "content": "CVE-2026-58704 was exploited in Pixel cellular modems before fixes, enabling privilege escalation without user interaction; CISA ordered federal agencies to patch within three days.\n", "creation_timestamp": "2026-09-18T09:57:46.896852Z"}, {"uuid": "e4227108-c7a2-42ee-9332-137a40c3c7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://t.me/true_secator/8615", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2026 \u0433\u043e\u0434\u0430, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 110 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Pixel, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 0-day, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCVE-2026-58704 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043a\u043e\u0434\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u044b, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Cellular Modem.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043e\u0441\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0438 \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Pixel \u0437\u0430 \u044d\u0442\u043e\u0442 \u043c\u0435\u0441\u044f\u0446 Google \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 109 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 RCE, \u0438 89 - EoP, \u043e\u0442\u043d\u0435\u0441\u0435\u043d\u043d\u044b\u0445 \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043b\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\u00a0Chrome 153\u00a0Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 42 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 28 \u043e\u0441\u043e\u0431\u043e \u0432\u0430\u0436\u043d\u044b\u0445.\n\n\u041a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-91726, \u043e\u0448\u0438\u0431\u043a\u0430 \u0447\u0442\u0435\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 WebGL, \u0430 \u0442\u0430\u043a\u0436\u0435 CVE-2026-91721 \u0438 CVE-2026-91749, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 Internals \u0438 Workers \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\nGoogle \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 use-after-free, \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438, \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435\u0439 \u0442\u0438\u043f\u043e\u0432, \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0446\u0435\u043b\u044b\u0445 \u0447\u0438\u0441\u0435\u043b, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438.\n\n\u0418\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 16 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u043d\u043e Google \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0443\u043c\u043c\u044b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 14 \u0438\u0437 \u043d\u0438\u0445. \u0411\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u043d\u0430 \u043e\u0431\u0449\u0443\u044e \u0441\u0443\u043c\u043c\u0443 2500 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome - 153.0.8010.47/.48 - \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 153.0.8010.47 \u0434\u043b\u044f Linux.", "creation_timestamp": "2026-09-18T10:00:05.948821Z"}, {"uuid": "8200adff-5a4e-4930-bfef-010df39d23dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/2k115.bsky.social/post/3mvryyxegns23", "content": "CVE-2026-58704 zero-click modem exploit on Pixel devices highlights physical-level vulnerability. CISA's 3-day patch order proves active exploitation was already running. Lower capital sees a routine software update; we see the ongoing battle for hardware control.", "creation_timestamp": "2026-09-18T10:55:43.126035Z"}, {"uuid": "bb48ae29-4844-4527-9116-1a7951a82e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/2k115.bsky.social/post/3mvrzi7li5s23", "content": "CVE-2026-58704 zero-click modem exploit on Pixel devices exposes targeted surveillance mechanics. CISA\u2019s 3-day mandate proves active exploitation via radio vectors. Lower capital sees a device feature; we see hardware state extraction. Control is physical. #Google #CISA", "creation_timestamp": "2026-09-18T11:04:16.068617Z"}, {"uuid": "ae64848f-c275-4502-a60f-8ccd7070853a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44448", "content": "Pixel Modem Zero-Day Exploited in Targeted Attacks\n\nGoogle announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15. \nThe post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.\nhttps://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/", "creation_timestamp": "2026-09-18T12:00:05.257322Z"}]}