Search CVEs, research… / diras.sa
  • CISA KEV
  • EXPLOITED

CVE-2026-58704: permission bypass privilege escalation in Google Pixel

An attacker with adjacent network access can bypass permission checks and escalate privileges on Google Pixel devices' Android kernel, potentially gaining high integrity and confidentiality access. CVE-2026-58704 is a logic error in the cellular modem that permits permission bypass without user interaction or additional execution privileges. The vulnerability affects the Android kernel branch on Pixel devices listed in vendor advisories; no fixed kernel versions are provided in the facts. Exploitation requires network proximity to the affected device and does not require a user to click or authenticate.

Published Updated Source: CVE Program, NVD, CISA KEV, FIRST EPSS

CVSS 3.1
8.8HIGH
EPSS
0.00591
CWE
CWE-285
KEV DUE DATE
PATCH
Not yet

DIRAS TAKE

Urgent: CISA added this issue to its Known Exploited Vulnerabilities catalog with a 2026-09-19 remediation requirement, so prioritize applying vendor mitigations or compensating controls immediately.

What is CVE-2026-58704?

An attacker with adjacent network access can bypass permission checks and escalate privileges on Google Pixel devices' Android kernel, potentially gaining high integrity and confidentiality access. CVE-2026-58704 is a logic error in the cellular modem that permits permission bypass without user interaction or additional execution privileges. The vulnerability affects the Android kernel branch on Pixel devices listed in vendor advisories; no fixed kernel versions are provided in the facts. Exploitation requires network proximity to the affected device and does not require a user to click or authenticate.

Vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Which versions of Google Pixel are affected?

BRANCHAFFECTEDFIXED
AndroidAndroid kernel

Is CVE-2026-58704 being exploited?

CISA added CVE-2026-58704 to the Known Exploited Vulnerabilities catalog on 2026-09-16, and U.S. federal agencies must remediate by 2026-09-19.

How to fix CVE-2026-58704

  1. Apply any mitigations or guidance published by Google for Pixel cellular modem/Android kernel issues.
  2. Restrict network exposure of affected Pixel devices by limiting adjacent-network access (for example, disable unnecessary wireless interfaces or restrict network segments).
  3. Monitor device and network logs for anomalous activity and signs of privilege escalation against Pixel devices.
  4. Follow CISA KEV guidance and your organization’s BOD 26-04 prioritization workflow until a vendor fix is available.

Frequently asked questions

Is CVE-2026-58704 being actively exploited?

CISA added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog on 2026-09-16, requiring remediation by 2026-09-19 for U.S. federal agencies.

Which Pixel versions are affected by CVE-2026-58704?

The vulnerability affects the Android kernel branch on Google Pixel devices as identified in vendor advisories; specific fixed versions are not listed in the provided facts.

Is there a patch for CVE-2026-58704?

No patch is listed in the provided facts; the Android kernel branch is affected and fixed versions are not provided, so follow vendor mitigations until a patch is released.

Does CVE-2026-58704 require authentication?

No. Exploitation does not require user interaction or additional execution privileges and can be performed with adjacent network access to the affected Pixel device.

References