CISA Gives Agencies 3 Days to Patch Exploited Pixel Zero-Day
Google says a Pixel modem zero-day was under targeted exploitation. CISA has added CVE-2026-58704 to KEV as users are urged to patch. The post CISA Gives Agencies 3 Days to Patch Exploited Pixel Zero-Day appeared first on TechRepublic .
The Cybersecurity and Infrastructure Security Agency (CISA) has given federal agencies just three days to patch a critical zero-day vulnerability discovered in Google Pixel smartphones. The vulnerability, tracked as CVE-2026-58704, allows attackers to escalate privileges without user interaction. Google confirmed the issue and released a security update to address the flaw in its September 2026 Pixel security release.
This type of hardware-level vulnerability poses a significant risk to federal enterprises as it allows attackers to bypass traditional security measures. Google's disclosure indicates the vulnerability may have already been exploited, highlighting the importance of prompt patching. Pixel owners are advised to ensure their devices are updated to the latest security version to mitigate the risk.
Written by urgent.news from TechRepublic's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
