Google Releases September 2026 Pixel Update to Address Zero-Day Flaw

Google released a security update for Pixel devices on September 15, 2026, following the discovery of a zero-day vulnerability affecting the modem component. The update aims to address multiple security issues identified in recent assessments.

The September 2026 update includes a fix for CVE-2026-58704, a vulnerability in the cellular modem that was being actively exploited in targeted attacks. This flaw allows privilege escalation through a logic error and can be exploited from an adjacent network without user interaction.

In total, the update addresses 110 security vulnerabilities affecting various Pixel models. Among these are 12 remote code execution vulnerabilities and 89 privilege escalation issues, which have been rated as critical or high severity by security researchers.

What the numbers show

• 110 vulnerabilities were addressed in the September 2026 update.
• 12 remote code execution flaws and 89 privilege escalation issues were patched.
• The update rollout began on September 15, 2026, and takes about 1.5 weeks to complete.

Google manages Pixel device updates separately from standard Android manufacturers, as it controls both the hardware platform and exclusive features. This approach allows for direct deployment of security patches to Pixel users.

The rollout of the September update is conducted over the air (OTA), with distribution expected to reach all supported devices within approximately one and a half weeks. This staged process ensures that devices receive the latest security protections as soon as possible.

Pixel 11 series devices initially received a September patch with a security level of 2026-09-01. However, these devices did not receive the September 5 patch level, which was necessary to address the zero-day vulnerability fixed in the latest update.

The zero-day flaw, CVE-2026-58704, was confirmed to be under active exploitation in limited, targeted attacks before the release of the update. The vulnerability specifically affects the modem component, enabling attackers to escalate privileges without requiring user action.

With the release of this update, Google has addressed a range of security concerns for Pixel device users. The company continues to provide regular updates to maintain device security and protect against emerging threats.

* This article is based on publicly available information at the time of writing.