CISA Flags Google Pixel Improper Authorization Vulnerability (CVE‑2026‑58704) as Known Exploited

CISA Flags Google Pixel Improper Authorization Vulnerability (CVE‑2026‑58704) as Known Exploited

What It Is — CISA added CVE‑2026‑58704, an improper‑authorization flaw in Google Pixel smartphones, to its Known Exploited Vulnerabilities (KEV) catalog after confirming active exploitation. The flaw can grant an attacker full control of the device once triggered.

Exploitability — Confirmed active exploitation in the wild; inclusion in the KEV catalog signals a real‑world threat. No public PoC is required for the vulnerability to be considered exploited.

Affected Products — Google Pixel mobile devices (all models impacted by the vulnerable code path).

Why It Matters for Trust & Control Assurance —

• Reinforces the need for a documented, risk‑based vulnerability‑management process that can surface high‑severity flaws quickly.
• Aligns with the control objective of continuously identifying, assessing, and remediating vulnerabilities—a single control that satisfies many frameworks (e.g., NIST CSF Identify, ISO 27001 A.12.6).
• Enables organizations to produce defensible evidence of timely remediation, a key requirement for audit readiness and trusted third‑party assessments.

Recommended Actions —

1. Inventory all Google Pixel devices in your environment and flag them as high‑risk assets.
2. Deploy Google’s remediation patch immediately on every affected device.
3. Record remediation dates and supporting evidence in your vulnerability‑management system to create an audit trail.
4. Update your patch‑prioritization policy to reference the CISA KEV catalog as a source of high‑severity findings.
5. Run a post‑remediation scan to verify the vulnerability is fully mitigated.

Source: CISA Advisory – KEV Catalog Update, 2026‑09‑16