CVE-2026-587048.0High
Google Pixel Improper Authorization Vulnerability
Google · Android
Exploited in the wild · in CISA KEV since 16 Sep
0.6%probability of exploitation in the next 30 days
49th percentile
050100
Higher than 49% of scored CVEs
8.0HighCVSS
LowMediumHighCrit.
Federal deadline
CISA KEV · added 16 Sep · catalogue entry
Passed 41 days ago
DescriptionNVD
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CISA required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Coverage8 articles · 6 outlets
One row per outlet, in order of first report. First in our coverage: SecurityOnline, 16 Sep.
Quiet for 3 weekslast report 9 Oct8 articles6 outlets
- Wed 16 Sep, 07:57 UTC. SecurityOnline, first report. Google Patches Pixel Modem Flaw Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
- Wed 16 Sep, 11:22 UTC. Malwarebytes, its first report on the story. Google Patches Pixel Modem Flaw Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
- Wed 16 Sep, 13:40 UTC. SecurityWeek, its first report on the story. Google Patches Pixel Zero Day Exploited in Targeted Attacks. Cites a CVE in CISA KEV.
- Wed 16 Sep, 14:01 UTC. CISA, its first report on the story. Actively Exploited Pixel Modem Flaw Bypasses Permission Checks. Cites a CVE in CISA KEV.
- Wed 16 Sep, 14:16 UTC. Security Affairs, its first report on the story. Google Fixes Exploited Pixel Modem Flaw in September Update. Cites a CVE in CISA KEV.
- Wed 16 Sep, 16:01 UTC. CISA. CISA Warns of Active Exploitation in Google Pixel Vulnerability. Cites a CVE in CISA KEV.
- Thu 17 Sep, 10:42 UTC. Security Affairs. CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws. Cites a CVE in CISA KEV.
- Fri 9 Oct, 10:20 UTC. The Hacker News, its first report on the story. Hackers Earn $562,500 for Three Remote Exploits on Pixel 10. Cites a CVE in CISA KEV.
- First report
- Article
- Official notice
- Running total
Added to CISA KEV
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 16 Sep 07:57 | SecurityOnline | Google Patches Pixel Modem Flaw Exploited in Targeted Attacks |
| 16 Sep 11:22 | Malwarebytes | Google Patches Pixel Modem Flaw Exploited in Targeted Attacks |
| 16 Sep 13:40 | SecurityWeek | Google Patches Pixel Zero Day Exploited in Targeted Attacks |
| 16 Sep 14:01 | CISA | Actively Exploited Pixel Modem Flaw Bypasses Permission Checks |
| 16 Sep 14:16 | Security Affairs | Google Fixes Exploited Pixel Modem Flaw in September Update |
| 16 Sep 16:01 | CISA | CISA Warns of Active Exploitation in Google Pixel Vulnerability |
| 17 Sep 10:42 | Security Affairs | CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws |
| 9 Oct 10:20 | The Hacker News | Hackers Earn $562,500 for Three Remote Exploits on Pixel 10 |
- Hackers Earn $562,500 for Three Remote Exploits on Pixel 10The Hacker News
- CISA Flags Actively Exploited Cisco, Acronis and Pixel FlawsSecurity Affairs · mentions it in passing
- CISA Warns of Active Exploitation in Google Pixel VulnerabilityCISA · official notice
- Google Fixes Exploited Pixel Modem Flaw in September UpdateSecurity Affairs
- Actively Exploited Pixel Modem Flaw Bypasses Permission ChecksCISA · official notice
- Google Patches Pixel Modem Flaw Exploited in Targeted AttacksSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.