[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-58704":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-17T07:07:30.415Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":827,"aliases":828,"duplicate_of":9,"upstream":829,"downstream":830,"duplicates":831,"related":832,"reserved_at":9,"published_at":833,"modified_at":834,"state":835,"summary":836,"references_raw":847,"kevs":860,"epss":871,"epss_history":873,"metrics":875,"affected":883},"CVE-2026-58704","In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",null,[11,641],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-285","Improper Authorization","The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.","weakness","Draft","Class","High",[20,68,72,131,276,318,322,326,330,334,338,342,509,599,629,633,637],{"id":21,"name":22,"techniques":23},"CAPEC-1","Accessing Functionality Not Properly Constrained by ACLs",[24],{"id":25,"name":26,"tactics":27,"countermeasures":43},"T1574.010","Services File Permissions Weakness",[28,31,34,37,40],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",{"id":35,"name":36},"TA0030","Defense Evasion",{"id":38,"name":39},"TA0005","Stealth",{"id":41,"name":42},"TA0104","Execution",[44,49,54,59,63],{"id":45,"name":46,"tactic":47},"D3-RS","Restore Software",{"name":48},"Restore",{"id":50,"name":51,"tactic":52},"D3-SWI","Software Inventory",{"name":53},"Model",{"id":55,"name":56,"tactic":57},"D3-SBV","Service Binary Verification",{"name":58},"Detect",{"id":60,"name":61,"tactic":62},"D3-AVE","Asset Vulnerability Enumeration",{"name":53},{"id":64,"name":65,"tactic":66},"D3-SU","Software Update",{"name":67},"Harden",{"id":69,"name":70,"techniques":71},"CAPEC-104","Cross Zone Scripting",[],{"id":73,"name":74,"techniques":75},"CAPEC-127","Directory Indexing",[76],{"id":77,"name":78,"tactics":79,"countermeasures":83},"T1083","File and Directory Discovery",[80],{"id":81,"name":82},"TA0102","Discovery",[84,89,93,98,102,106,110,114,118,122,126],{"id":85,"name":86,"tactic":87},"D3-CQ","Content Quarantine",{"name":88},"Isolate",{"id":90,"name":91,"tactic":92},"D3-FE","File Encryption",{"name":67},{"id":94,"name":95,"tactic":96},"D3-DF","Decoy File",{"name":97},"Deceive",{"id":99,"name":100,"tactic":101},"D3-FA","File Analysis",{"name":58},{"id":103,"name":104,"tactic":105},"D3-FIM","File Integrity Monitoring",{"name":58},{"id":107,"name":108,"tactic":109},"D3-LFP","Local File Permissions",{"name":88},{"id":111,"name":112,"tactic":113},"D3-CF","Content Filtering",{"name":88},{"id":115,"name":116,"tactic":117},"D3-RFAM","Remote File Access Mediation",{"name":88},{"id":119,"name":120,"tactic":121},"D3-RF","Restore File",{"name":48},{"id":123,"name":124,"tactic":125},"D3-CM","Content Modification",{"name":88},{"id":127,"name":128,"tactic":129},"D3-FEV","File Eviction",{"name":130},"Evict",{"id":132,"name":133,"techniques":134},"CAPEC-13","Subverting Environment Variable Values",[135,200,236],{"id":136,"name":137,"tactics":138,"countermeasures":141},"T1562.003","Impair Command History Logging",[139,140],{"id":35,"name":36},{"id":38,"name":39},[142,144,146,150,152,154,158,162,166,168,170,174,178,180,182,184,188,190,192,196],{"id":119,"name":120,"tactic":143},{"name":48},{"id":85,"name":86,"tactic":145},{"name":88},{"id":147,"name":148,"tactic":149},"D3-CI","Configuration Inventory",{"name":53},{"id":94,"name":95,"tactic":151},{"name":97},{"id":99,"name":100,"tactic":153},{"name":58},{"id":155,"name":156,"tactic":157},"D3-DRA","Disable Remote Access",{"name":67},{"id":159,"name":160,"tactic":161},"D3-ACH","Application Configuration Hardening",{"name":67},{"id":163,"name":164,"tactic":165},"D3-RC","Restore Configuration",{"name":48},{"id":90,"name":91,"tactic":167},{"name":67},{"id":103,"name":104,"tactic":169},{"name":58},{"id":171,"name":172,"tactic":173},"D3-RKD","Registry Key Deletion",{"name":130},{"id":175,"name":176,"tactic":177},"D3-DA","Dynamic Analysis",{"name":58},{"id":111,"name":112,"tactic":179},{"name":88},{"id":107,"name":108,"tactic":181},{"name":88},{"id":127,"name":128,"tactic":183},{"name":130},{"id":185,"name":186,"tactic":187},"D3-EFA","Emulated File Analysis",{"name":58},{"id":115,"name":116,"tactic":189},{"name":88},{"id":123,"name":124,"tactic":191},{"name":88},{"id":193,"name":194,"tactic":195},"D3-EAL","Executable Allowlisting",{"name":88},{"id":197,"name":198,"tactic":199},"D3-EDL","Executable Denylisting",{"name":88},{"id":201,"name":202,"tactics":203,"countermeasures":209},"T1574.006","Dynamic Linker Hijacking",[204,205,206,207,208],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[210,212,214,216,220,222,224,226,228,230,232,234],{"id":123,"name":124,"tactic":211},{"name":88},{"id":127,"name":128,"tactic":213},{"name":130},{"id":99,"name":100,"tactic":215},{"name":58},{"id":217,"name":218,"tactic":219},"D3-SFA","System File Analysis",{"name":58},{"id":119,"name":120,"tactic":221},{"name":48},{"id":111,"name":112,"tactic":223},{"name":88},{"id":107,"name":108,"tactic":225},{"name":88},{"id":90,"name":91,"tactic":227},{"name":67},{"id":115,"name":116,"tactic":229},{"name":88},{"id":85,"name":86,"tactic":231},{"name":88},{"id":94,"name":95,"tactic":233},{"name":97},{"id":103,"name":104,"tactic":235},{"name":58},{"id":237,"name":238,"tactics":239,"countermeasures":245},"T1574.007","Path Interception by PATH Environment Variable",[240,241,242,243,244],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[246,248,250,252,254,256,258,260,262,264,266,268,270,272,274],{"id":123,"name":124,"tactic":247},{"name":88},{"id":99,"name":100,"tactic":249},{"name":58},{"id":94,"name":95,"tactic":251},{"name":97},{"id":111,"name":112,"tactic":253},{"name":88},{"id":127,"name":128,"tactic":255},{"name":130},{"id":103,"name":104,"tactic":257},{"name":58},{"id":107,"name":108,"tactic":259},{"name":88},{"id":90,"name":91,"tactic":261},{"name":67},{"id":193,"name":194,"tactic":263},{"name":88},{"id":175,"name":176,"tactic":265},{"name":58},{"id":115,"name":116,"tactic":267},{"name":88},{"id":197,"name":198,"tactic":269},{"name":88},{"id":185,"name":186,"tactic":271},{"name":58},{"id":85,"name":86,"tactic":273},{"name":88},{"id":119,"name":120,"tactic":275},{"name":48},{"id":277,"name":278,"techniques":279},"CAPEC-17","Using Malicious Files",[280,300],{"id":281,"name":282,"tactics":283,"countermeasures":289},"T1574.005","Executable Installer File Permissions Weakness",[284,285,286,287,288],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[290,292,294,296,298],{"id":64,"name":65,"tactic":291},{"name":67},{"id":45,"name":46,"tactic":293},{"name":48},{"id":60,"name":61,"tactic":295},{"name":53},{"id":50,"name":51,"tactic":297},{"name":53},{"id":55,"name":56,"tactic":299},{"name":58},{"id":25,"name":26,"tactics":301,"countermeasures":307},[302,303,304,305,306],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[308,310,312,314,316],{"id":45,"name":46,"tactic":309},{"name":48},{"id":50,"name":51,"tactic":311},{"name":53},{"id":55,"name":56,"tactic":313},{"name":58},{"id":60,"name":61,"tactic":315},{"name":53},{"id":64,"name":65,"tactic":317},{"name":67},{"id":319,"name":320,"techniques":321},"CAPEC-39","Manipulating Opaque Client-based Data Tokens",[],{"id":323,"name":324,"techniques":325},"CAPEC-402","Bypassing ATA Password Security",[],{"id":327,"name":328,"techniques":329},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":331,"name":332,"techniques":333},"CAPEC-5","Blue Boxing",[],{"id":335,"name":336,"techniques":337},"CAPEC-51","Poison Web Service Registry",[],{"id":339,"name":340,"techniques":341},"CAPEC-59","Session Credential Falsification through Prediction",[],{"id":343,"name":344,"techniques":345},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[346,398],{"id":347,"name":348,"tactics":349,"countermeasures":353},"T1134.001","Token Impersonation/Theft",[350,351,352],{"id":35,"name":36},{"id":38,"name":39},{"id":32,"name":33},[354,358,362,366,370,374,378,382,386,390,394],{"id":355,"name":356,"tactic":357},"D3-CR","Credential Revocation",{"name":130},{"id":359,"name":360,"tactic":361},"D3-CCSA","Credential Compromise Scope Analysis",{"name":58},{"id":363,"name":364,"tactic":365},"D3-CTS","Credential Transmission Scoping",{"name":88},{"id":367,"name":368,"tactic":369},"D3-ANCI","Authentication Cache Invalidation",{"name":130},{"id":371,"name":372,"tactic":373},"D3-TB","Token Binding",{"name":67},{"id":375,"name":376,"tactic":377},"D3-TBA","Token-based Authentication",{"name":67},{"id":379,"name":380,"tactic":381},"D3-DUC","Decoy User Credential",{"name":97},{"id":383,"name":384,"tactic":385},"D3-CH","Credential Hardening",{"name":67},{"id":387,"name":388,"tactic":389},"D3-CRO","Credential Rotation",{"name":67},{"id":391,"name":392,"tactic":393},"D3-MFA","Multi-factor Authentication",{"name":67},{"id":395,"name":396,"tactic":397},"D3-RIC","Reissue Credential",{"name":48},{"id":399,"name":400,"tactics":401,"countermeasures":406},"T1550.004","Web Session Cookie",[402,403],{"id":35,"name":36},{"id":404,"name":405},"TA0109","Lateral Movement",[407,409,413,415,417,421,425,429,433,437,441,445,449,453,457,459,463,465,469,471,475,479,481,483,487,491,495,497,501,505],{"id":387,"name":388,"tactic":408},{"name":67},{"id":410,"name":411,"tactic":412},"D3-SCF","System Call Filtering",{"name":88},{"id":395,"name":396,"tactic":414},{"name":48},{"id":363,"name":364,"tactic":416},{"name":88},{"id":418,"name":419,"tactic":420},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":58},{"id":422,"name":423,"tactic":424},"D3-APCA","Application Protocol Command Analysis",{"name":58},{"id":426,"name":427,"tactic":428},"D3-PSMD","Process Self-Modification Detection",{"name":58},{"id":430,"name":431,"tactic":432},"D3-RTSD","Remote Terminal Session Detection",{"name":58},{"id":434,"name":435,"tactic":436},"D3-PSA","Process Spawn Analysis",{"name":58},{"id":438,"name":439,"tactic":440},"D3-HBPI","Hardware-based Process Isolation",{"name":88},{"id":442,"name":443,"tactic":444},"D3-KBPI","Kernel-based Process Isolation",{"name":88},{"id":446,"name":447,"tactic":448},"D3-ABPI","Application-based Process Isolation",{"name":88},{"id":450,"name":451,"tactic":452},"D3-HS","Host Shutdown",{"name":130},{"id":454,"name":455,"tactic":456},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":58},{"id":355,"name":356,"tactic":458},{"name":130},{"id":460,"name":461,"tactic":462},"D3-HR","Host Reboot",{"name":130},{"id":359,"name":360,"tactic":464},{"name":58},{"id":466,"name":467,"tactic":468},"D3-NTF","Network Traffic Filtering",{"name":88},{"id":379,"name":380,"tactic":470},{"name":97},{"id":472,"name":473,"tactic":474},"D3-CSPP","Client-server Payload Profiling",{"name":58},{"id":476,"name":477,"tactic":478},"D3-PT","Process Termination",{"name":130},{"id":383,"name":384,"tactic":480},{"name":67},{"id":391,"name":392,"tactic":482},{"name":67},{"id":484,"name":485,"tactic":486},"D3-PLA","Process Lineage Analysis",{"name":58},{"id":488,"name":489,"tactic":490},"D3-NTCD","Network Traffic Community Deviation",{"name":58},{"id":492,"name":493,"tactic":494},"D3-PS","Process Suspension",{"name":130},{"id":367,"name":368,"tactic":496},{"name":130},{"id":498,"name":499,"tactic":500},"D3-NTSA","Network Traffic Signature Analysis",{"name":58},{"id":502,"name":503,"tactic":504},"D3-WSAM","Web Session Access Mediation",{"name":88},{"id":506,"name":507,"tactic":508},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":58},{"id":510,"name":511,"techniques":512},"CAPEC-647","Collect Data from Registries",[513,543,567],{"id":514,"name":515,"tactics":516,"countermeasures":520},"T1005","Data from Local System",[517],{"id":518,"name":519},"TA0100","Collection",[521,523,525,527,529,531,533,535,537,539,541],{"id":111,"name":112,"tactic":522},{"name":88},{"id":94,"name":95,"tactic":524},{"name":97},{"id":119,"name":120,"tactic":526},{"name":48},{"id":107,"name":108,"tactic":528},{"name":88},{"id":127,"name":128,"tactic":530},{"name":130},{"id":115,"name":116,"tactic":532},{"name":88},{"id":99,"name":100,"tactic":534},{"name":58},{"id":123,"name":124,"tactic":536},{"name":88},{"id":90,"name":91,"tactic":538},{"name":67},{"id":103,"name":104,"tactic":540},{"name":58},{"id":85,"name":86,"tactic":542},{"name":88},{"id":544,"name":545,"tactics":546,"countermeasures":548},"T1012","Query Registry",[547],{"id":81,"name":82},[549,553,555,559,563],{"id":550,"name":551,"tactic":552},"D3-SCP","System Configuration Permissions",{"name":67},{"id":410,"name":411,"tactic":554},{"name":88},{"id":556,"name":557,"tactic":558},"D3-SCA","System Call Analysis",{"name":58},{"id":560,"name":561,"tactic":562},"D3-RD","Restore Database",{"name":48},{"id":564,"name":565,"tactic":566},"D3-DI","Data Inventory",{"name":53},{"id":568,"name":569,"tactics":570,"countermeasures":574},"T1552.002","Credentials in Registry",[571],{"id":572,"name":573},"TA0031","Credential Access",[575,577,579,581,583,585,587,589,591,593,595,597],{"id":395,"name":396,"tactic":576},{"name":48},{"id":359,"name":360,"tactic":578},{"name":58},{"id":391,"name":392,"tactic":580},{"name":67},{"id":383,"name":384,"tactic":582},{"name":67},{"id":363,"name":364,"tactic":584},{"name":88},{"id":355,"name":356,"tactic":586},{"name":130},{"id":550,"name":551,"tactic":588},{"name":67},{"id":367,"name":368,"tactic":590},{"name":130},{"id":387,"name":388,"tactic":592},{"name":67},{"id":560,"name":561,"tactic":594},{"name":48},{"id":379,"name":380,"tactic":596},{"name":97},{"id":564,"name":565,"tactic":598},{"name":53},{"id":600,"name":601,"techniques":602},"CAPEC-668","Key Negotiation of Bluetooth Attack (KNOB)",[603],{"id":604,"name":605,"tactics":606,"countermeasures":610},"T1565.002","Transmitted Data Manipulation",[607],{"id":608,"name":609},"TA0105","Impact",[611,613,615,617,619,621,623,625,627],{"id":498,"name":499,"tactic":612},{"name":58},{"id":430,"name":431,"tactic":614},{"name":58},{"id":466,"name":467,"tactic":616},{"name":88},{"id":454,"name":455,"tactic":618},{"name":58},{"id":422,"name":423,"tactic":620},{"name":58},{"id":472,"name":473,"tactic":622},{"name":58},{"id":418,"name":419,"tactic":624},{"name":58},{"id":488,"name":489,"tactic":626},{"name":58},{"id":506,"name":507,"tactic":628},{"name":58},{"id":630,"name":631,"techniques":632},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":634,"name":635,"techniques":636},"CAPEC-77","Manipulating User-Controlled Variables",[],{"id":638,"name":639,"techniques":640},"CAPEC-87","Forceful Browsing",[],{"_key":642,"id":642,"name":643,"description":644,"type":15,"status":16,"abstraction":645,"likelihood_of_exploit":9,"capec":646},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","Pillar",[647,667,671,699,737,741,745,749,753,757,767,769,784,786,797,821,825],{"id":21,"name":22,"techniques":648},[649],{"id":25,"name":26,"tactics":650,"countermeasures":656},[651,652,653,654,655],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[657,659,661,663,665],{"id":45,"name":46,"tactic":658},{"name":48},{"id":50,"name":51,"tactic":660},{"name":53},{"id":55,"name":56,"tactic":662},{"name":58},{"id":60,"name":61,"tactic":664},{"name":53},{"id":64,"name":65,"tactic":666},{"name":67},{"id":668,"name":669,"techniques":670},"CAPEC-107","Cross Site Tracing",[],{"id":73,"name":74,"techniques":672},[673],{"id":77,"name":78,"tactics":674,"countermeasures":676},[675],{"id":81,"name":82},[677,679,681,683,685,687,689,691,693,695,697],{"id":85,"name":86,"tactic":678},{"name":88},{"id":90,"name":91,"tactic":680},{"name":67},{"id":94,"name":95,"tactic":682},{"name":97},{"id":99,"name":100,"tactic":684},{"name":58},{"id":103,"name":104,"tactic":686},{"name":58},{"id":107,"name":108,"tactic":688},{"name":88},{"id":111,"name":112,"tactic":690},{"name":88},{"id":115,"name":116,"tactic":692},{"name":88},{"id":119,"name":120,"tactic":694},{"name":48},{"id":123,"name":124,"tactic":696},{"name":88},{"id":127,"name":128,"tactic":698},{"name":130},{"id":277,"name":278,"techniques":700},[701,719],{"id":281,"name":282,"tactics":702,"countermeasures":708},[703,704,705,706,707],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[709,711,713,715,717],{"id":64,"name":65,"tactic":710},{"name":67},{"id":45,"name":46,"tactic":712},{"name":48},{"id":60,"name":61,"tactic":714},{"name":53},{"id":50,"name":51,"tactic":716},{"name":53},{"id":55,"name":56,"tactic":718},{"name":58},{"id":25,"name":26,"tactics":720,"countermeasures":726},[721,722,723,724,725],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[727,729,731,733,735],{"id":45,"name":46,"tactic":728},{"name":48},{"id":50,"name":51,"tactic":730},{"name":53},{"id":55,"name":56,"tactic":732},{"name":58},{"id":60,"name":61,"tactic":734},{"name":53},{"id":64,"name":65,"tactic":736},{"name":67},{"id":738,"name":739,"techniques":740},"CAPEC-20","Encryption Brute Forcing",[],{"id":742,"name":743,"techniques":744},"CAPEC-22","Exploiting Trust in Client",[],{"id":746,"name":747,"techniques":748},"CAPEC-237","Escaping a Sandbox by Calling Code in Another Language",[],{"id":750,"name":751,"techniques":752},"CAPEC-36","Using Unpublished Interfaces or Functionality",[],{"id":754,"name":755,"techniques":756},"CAPEC-477","Signature Spoofing by Mixing Signed and Unsigned Content",[],{"id":758,"name":759,"techniques":760},"CAPEC-480","Escaping Virtualization",[761],{"id":762,"name":763,"tactics":764,"countermeasures":766},"T1611","Escape to Host",[765],{"id":32,"name":33},[],{"id":335,"name":336,"techniques":768},[],{"id":770,"name":771,"techniques":772},"CAPEC-57","Utilizing REST's Trust in the System Resource to Obtain Sensitive Data",[773],{"id":774,"name":775,"tactics":776,"countermeasures":779},"T1040","Network Sniffing",[777,778],{"id":572,"name":573},{"id":81,"name":82},[780],{"id":781,"name":782,"tactic":783},"D3-DNSTA","DNS Traffic Analysis",{"name":58},{"id":339,"name":340,"techniques":785},[],{"id":787,"name":788,"techniques":789},"CAPEC-65","Sniff Application Code",[790],{"id":774,"name":775,"tactics":791,"countermeasures":794},[792,793],{"id":572,"name":573},{"id":81,"name":82},[795],{"id":781,"name":782,"tactic":796},{"name":58},{"id":600,"name":601,"techniques":798},[799],{"id":604,"name":605,"tactics":800,"countermeasures":802},[801],{"id":608,"name":609},[803,805,807,809,811,813,815,817,819],{"id":498,"name":499,"tactic":804},{"name":58},{"id":430,"name":431,"tactic":806},{"name":58},{"id":466,"name":467,"tactic":808},{"name":88},{"id":454,"name":455,"tactic":810},{"name":58},{"id":422,"name":423,"tactic":812},{"name":58},{"id":472,"name":473,"tactic":814},{"name":58},{"id":418,"name":419,"tactic":816},{"name":58},{"id":488,"name":489,"tactic":818},{"name":58},{"id":506,"name":507,"tactic":820},{"name":58},{"id":822,"name":823,"techniques":824},"CAPEC-74","Manipulating State",[],{"id":638,"name":639,"techniques":826},[],[],[],[],[],[],[],"2026-09-15T18:34:37.966Z","2026-09-17T03:55:53.112Z","Analyzed",{"cisa_kev":837,"cisa_ransomware":838,"cisa_vendor":839,"epss_severity":840,"epss_score":841,"severity":842,"severity_score":843,"severity_version":844,"severity_source":845,"severity_vector":846,"severity_status":835},true,false,"Google","low",0.00112,"high",8.8,"v3.1","cve.org","CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[848,854],{"url":849,"sources":850,"tags":852},"https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01",[845,851],"nvd",[853],"Vendor Advisory",{"url":855,"sources":856,"tags":857},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-58704",[845,851],[858,859],"Government Resource","US Government Resource",[861],{"source":862,"vendor":839,"product":863,"date_added":864,"vulnerability_name":865,"short_description":866,"required_action":867,"due_date":868,"known_ransomware_campaign_use":869,"notes":870,"exploitation_type":9},"cisa","Pixel","2026-09-16","Google Pixel Improper Authorization Vulnerability","Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-09-19","Unknown","https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-58704",{"date":864,"score":841,"percentile":872},0.01564,[874],{"date":864,"score":841,"percentile":872},[876,881],{"source":845,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":877,"cvss_v4_0":9},{"baseScore":843,"baseSeverity":878,"vectorString":846,"impactScore":879,"exploitabilityScore":880},"HIGH",9.8,7.2,{"source":851,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":882,"cvss_v4_0":9},{"baseScore":843,"baseSeverity":878,"vectorString":846,"impactScore":879,"exploitabilityScore":880},[884],{"ecosystem":9,"name":885,"vendor":886,"product":885,"cpe_part":887,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":888},"android","google","o",[889,892],{"version":890,"is_range":838,"range_type":845,"version_start":890,"version_start_type":891,"version_end":890,"version_end_type":891,"fixed_in":9},"Android kernel","including",{"version":893,"is_range":838,"range_type":894,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"na","cpe"]