CISA Lists Actively Exploited Google Pixel Modem Vulnerability

CISA has added a high-severity Google Pixel modem vulnerability (CVE-2026-58704) to its KEV Catalog due to active exploitation. This privilege escalation flaw, acknowledged by Google, allows zero-click attacks to bypass permission checks. Federal Civilian Executive Branch agencies must apply patches by September 19, 2026, underscoring the urgency of addressing this security risk for affected users.