ctrlINT What the industry said about every indicator, with the quote

CVE-2026-58704Vulnerability

Google Pixel Improper Authorization Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 4 independent sources · first reported by The Register (security) · last reported

Last reported 12 days ago

CISA KEVAdded 16 Sep 2026
Fix due 19 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS0.6%
higher than 47% of CVEsFIRST EPSS, as of 24 Oct 2026

What the reports say

4 reports, newest first · the exact sentence from each

  1. “CVE-2026-58704”

    Recorded FutureVendor
    September 2026 CVE Landscape

  2. “Separately, Google in September patched a Pixel modem flaw, CVE-2026-58704, that it said : "may be under limited, targeted exploitation." Pixel phones at patch level 2026-09-05 or later have that fix.”

    The Hacker NewsNews
    Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

  3. “CVE-2026-58704”

    CERT-FRGovernment
    Bulletin d'actualité CERTFR-2026-ACT-040 (21 septembre 2026)

  4. “Google disclosed the high-severity vulnerability, tracked as CVE-2026-58704, on Tuesday - and, at the time, warned the security hole “may be under limited, targeted exploitation.” In other words: miscreants found and exploited this bug before Google fixed the issue.”

    The Register (security)News
    Google Pixel phones pwned in zero-click attacks

Indicators reported together

named in the same reports
Copy these 3 indicators · defanged

Also named with it: CVE-2026-87491, CVE-2026-85046, CVE-2025-39964, CVE-2026-53266, CVE-2026-76460, CVE-2026-76461, CVE-2025-39682, CVE-2026-87886, CVE-2023-54391, CVE-2026-65400, CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85880, CVE-2025-14923, CVE-2026-11541, CVE-2026-48710

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-58704 here?
No account needed. We do not store your IP address.