Pixel phones targeted in zero-day attacks: Google urges users to update now

Google has flagged a security vulnerability in Pixel phones that may already be exploited in limited, targeted attacks. The issue is part of the company’s September 2026 security update and affects the modem component on Pixel devices. Tracked as CVE-2026-58704, the vulnerability is classified as a high-severity elevation-of-privilege flaw.

Must Read: MediaTek launches Dimensity 9600 Pro SoC: Oppo Find X10 Pro Max to be among first phones with flagship chip

Google has not disclosed details about who may be behind the exploitation or how the attacks are being carried out. However, its security bulletin indicates that the vulnerability may already be actively targeted. Pixel users should check the latest security patch to ensure the affected flaw is addressed.

What is the Pixel vulnerability?

According to Google’s September Pixel Update Bulletin, CVE-2026-58704 affects the Modem component and is classified as an Elevation of Privilege (EoP) vulnerability with a High severity rating. Google says there are indications that the vulnerability may be under “limited, targeted exploitation”.

An elevation-of-privilege flaw can allow an attacker to gain permissions or access beyond what they are normally authorised to have. However, Google has not shared technical details about how CVE-2026-58704 is being exploited in the wild.

Must Read: iPhone 16 Pro vs iPhone 18 Pro: What has changed and should you upgrade?

The vulnerability is included in Google’s September security release, which contains fixes for security issues affecting supported Pixel devices. The company has also not identified specific Pixel models that may have been targeted.

Check your Pixel security update

Google says security patch levels of 2026-09-05 or later address all issues associated with the 2026-09-05 security patch level and previous patch levels. The company also encourages customers to accept the available updates on their devices.

If you use a supported Pixel phone, go to your device’s software update settings and check whether the latest security patch is available. Installing the update will ensure your phone has the fixes covered by Google’s September Pixel security bulletin, including the patch for CVE-2026-58704.

Google’s warning makes the September security update particularly relevant for Pixel users, given the indication of limited, targeted exploitation.