Google has released an urgent security bulletin advising all Pixel smartphone users to install the latest September 2026 security update immediately. The warning comes as a critical modem vulnerability, identified as CVE-2026-58704, is reportedly facing “limited, targeted exploitation” in zero-day attacks.
The vulnerability, classified as a high-severity elevation-of-privilege (EoP) flaw, affects the modem component across supported Pixel devices. An EoP flaw can allow an attacker to gain unauthorized permissions or access beyond their normal privileges on the device. While Google has not disclosed specific details about the nature of the attacks or the identities of those behind them, the active exploitation makes the update crucial for user security.
What Pixel Users Need to Know
The September 2026 security release includes patches for various security issues, with CVE-2026-58704 being a primary concern due to its active exploitation. Google has not specified which particular Pixel models might be more susceptible, implying that all supported Pixel devices are potentially at risk.
How to Secure Your Pixel Device
Users are strongly encouraged to check their device’s software update settings. Google states that security patch levels of 2026-09-05 or later address all the issues included in this bulletin, including the critical modem flaw. Installing this update will ensure your phone receives the necessary fixes.
“Google’s warning makes the September security update particularly relevant for Pixel users, given the indication of limited, targeted exploitation,” the company noted, emphasizing the urgency.
To update your Pixel phone, navigate to your device’s settings, then to “System” or “About phone,” and select “System update” or “Software update.” Follow the prompts to download and install any available updates. Prompt action is advised to protect against potential threats posed by these targeted zero-day attacks.