17 September 2026
Reference: CVE-2026-58704
1. What is being reported?
There is a problem in the part of Google Pixel phones that handles mobile network connections. Due to a mistake in the software, attackers close by can bypass security controls and gain higher access privileges on the device without needing the user to click or approve anything.
2. What this means in plain English
If your organisation uses Google Pixel phones, attackers near your location could potentially take control of these devices remotely. This could lead to data theft or other malicious actions. Because no user interaction is needed, the risk is higher than usual.
3. Could this affect a small business?
Small businesses using Google Pixel phones could be affected, especially if employees use these devices for work. If you do not use Google Pixel phones, this vulnerability does not affect you. Check with your IT provider if you are unsure.
4. What to do now
- Contact your IT provider or Google support to check for and apply any available security updates or mitigations for your Pixel phones.
- Ensure that all Google Pixel devices used in your organisation are updated promptly following vendor instructions.
- Review your organisation’s policies on mobile device use and consider limiting sensitive work on vulnerable devices until patched.
- Ask your IT provider to evaluate the exposure of your devices and follow recommended security update prioritisation guidelines.
5. Ask your IT provider
Have all Google Pixel phones in our organisation been checked and updated to fix the recent cellular modem security vulnerability (CVE-2026-58704)?
6. Bottom line
If you use Google Pixel phones, act quickly to update them and reduce the risk of remote attacks.
Information based on CISA KEV, NVD and multiple reputable security news reports.