Google confirmed a vulnerability in Pixel smartphone modems was exploited in targeted cyberattacks. The flaw allowed privilege escalation and zero-click attacks, requiring no user interaction. CISA classified it as a known exploited vulnerability. Google addressed CVE-2026-58704 in its September 2026 security update, noting limited, targeted exploitation.