Improper Authorization Vulnerability in Google Pixel Modem (CVE‑2026‑58704) Enables Privilege Escalation
What It Is — Google Pixel smartphones contain a logic error in the cellular modem firmware that can bypass permission checks, allowing an attacker to elevate privileges on the device. The flaw is tracked as CVE‑2026‑58704 and has been added to the CISA Known Exploited Vulnerabilities (KEV) catalog.
Exploitability — No public proof‑of‑concept has been released, but the vulnerability is classified as exploitable by a remote attacker with access to the cellular interface. A CVSS score has not yet been published; analysts rate the impact as high because it subverts core access‑control mechanisms.
Affected Products — All Google Pixel models shipping with the affected modem firmware (including Pixel 6, Pixel 6a, Pixel 7, Pixel 7 Pro, and later releases) are vulnerable until a firmware update is applied.
Why It Matters for Trust & Control Assurance
- Access‑control integrity – The flaw demonstrates how a missing authorization check can break the chain of trust that enterprises rely on for device security.
- Continuous evidence – Demonstrating that devices are patched and that firmware integrity is monitored provides audit‑ready evidence of due‑diligence.
- Defensible audit trail – Maintaining up‑to‑date patch records and verification logs satisfies control‑objective requirements across multiple frameworks (e.g., NIST CSF 2.0 “Protect” function).
Recommended Actions
- Deploy the latest Google‑issued firmware update to all Pixel devices immediately.
- Verify patch status across your inventory using a mobile‑device‑management (MDM) solution and retain logs as evidence.
- Update your device‑risk register to reflect the new privilege‑escalation risk and adjust access‑control policies accordingly.
- Enable automatic OTA updates where possible to reduce future exposure.
- Monitor network traffic for anomalous modem‑level activity that could indicate exploitation attempts.
Source: CISA KEV – CVE‑2026‑58704