<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T05:24:07.900631+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/afcdcd06-74fa-4c82-bd81-2f4f5d642826/export</id>
    <title>afcdcd06-74fa-4c82-bd81-2f4f5d642826</title>
    <updated>2026-09-17T05:24:07.924741+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "afcdcd06-74fa-4c82-bd81-2f4f5d642826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/newsanalysis.com/post/3mvosaiafoh27", "content": "Google Pixel phones were targeted by zero-click attacks exploiting a cellular modem vulnerability (CVE-2026-58704). This flaw allowed privilege escalation without user interaction. The vulnerability has since been patched. Ensure your device is updated. #cybersecurity #News", "creation_timestamp": "2026-09-17T04:16:40.674324Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/afcdcd06-74fa-4c82-bd81-2f4f5d642826/export"/>
    <published>2026-09-17T04:16:40.674324+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/09ecf035-20cb-4b86-b102-25538d18bfd5/export</id>
    <title>09ecf035-20cb-4b86-b102-25538d18bfd5</title>
    <updated>2026-09-17T05:24:07.927577+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "09ecf035-20cb-4b86-b102-25538d18bfd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvorq4qcuz2z", "content": "Google confirmed a Pixel modem zero-day (CVE-2026-58704) exploited in a zero-click spyware attack to escape the modem sandbox. Update now.\n\n#Pixel #ZeroDay #CVE202658704 #Google #Spyware #ZeroClick #CyberSecurity", "creation_timestamp": "2026-09-17T04:07:31.108429Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/09ecf035-20cb-4b86-b102-25538d18bfd5/export"/>
    <published>2026-09-17T04:07:31.108429+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6ea4f3f6-b2d1-4d2b-b1f4-0255931c3645/export</id>
    <title>6ea4f3f6-b2d1-4d2b-b1f4-0255931c3645</title>
    <updated>2026-09-17T05:24:07.927732+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6ea4f3f6-b2d1-4d2b-b1f4-0255931c3645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvokyu3kby2v", "content": "\ud83d\udccc CVE-2026-58704 - In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of... https://www.cyberhub.blog/cves/CVE-2026-58704", "creation_timestamp": "2026-09-17T02:07:08.373878Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6ea4f3f6-b2d1-4d2b-b1f4-0255931c3645/export"/>
    <published>2026-09-17T02:07:08.373878+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/64fea34b-ee3b-4ba8-bc4e-aac385e02cd9/export</id>
    <title>64fea34b-ee3b-4ba8-bc4e-aac385e02cd9</title>
    <updated>2026-09-17T05:24:07.927851+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "64fea34b-ee3b-4ba8-bc4e-aac385e02cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/", "content": "Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15. \n\nThe post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:37.182629Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/64fea34b-ee3b-4ba8-bc4e-aac385e02cd9/export"/>
    <published>2026-09-17T01:00:37.182629+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4e0fea2d-5742-474d-9990-cb43be0abeb9/export</id>
    <title>4e0fea2d-5742-474d-9990-cb43be0abeb9</title>
    <updated>2026-09-17T05:24:07.927960+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4e0fea2d-5742-474d-9990-cb43be0abeb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html", "content": "Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw.\n\n\"In Cellular Modem, there is a possible permission bypass due to a logic error in the code,\" according to a description of the bug in the NIST National Vulnerability Database", "creation_timestamp": "2026-09-17T01:00:36.798434Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4e0fea2d-5742-474d-9990-cb43be0abeb9/export"/>
    <published>2026-09-17T01:00:36.798434+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/164ed1d8-a193-4c44-85fa-624ca5446c10/export</id>
    <title>164ed1d8-a193-4c44-85fa-624ca5446c10</title>
    <updated>2026-09-17T05:24:07.928071+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "164ed1d8-a193-4c44-85fa-624ca5446c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://t.me/thehackernews/10070", "content": "\u203c\ufe0f ALERT - Google says a Pixel modem flaw may be under limited, targeted exploitation.\n\nCVE-2026-58704 can enable adjacent privilege escalation without user interaction. Google patched it in the September Pixel update.\n\nWhat\u2019s known about the attacks \u2192 https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html", "creation_timestamp": "2026-09-17T01:00:04.255357Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/164ed1d8-a193-4c44-85fa-624ca5446c10/export"/>
    <published>2026-09-17T01:00:04.255357+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a306a650-41b4-4207-903c-9e3adab9e63f/export</id>
    <title>a306a650-41b4-4207-903c-9e3adab9e63f</title>
    <updated>2026-09-17T05:24:07.928187+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a306a650-41b4-4207-903c-9e3adab9e63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvofhde7ew2d", "content": "Google Pixel Vulnerability Exploited: CVE-2026-58704 Enables Zero-Click Privilege Escalation\uff08Google Pixel\u306e\u8106\u5f31\u6027CVE-2026-58704\u3001\u30bc\u30ed\u30af\u30ea\u30c3\u30af\u653b\u6483\u3067\u60aa\u7528\uff09 #SecurityOnline (Sep 16)\n\nsecurityonline.info/google-pixel...", "creation_timestamp": "2026-09-17T00:27:51.139637Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a306a650-41b4-4207-903c-9e3adab9e63f/export"/>
    <published>2026-09-17T00:27:51.139637+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3e73a433-4939-4383-9853-cc78955247d3/export</id>
    <title>3e73a433-4939-4383-9853-cc78955247d3</title>
    <updated>2026-09-17T05:24:07.928291+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3e73a433-4939-4383-9853-cc78955247d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvof25xduo2e", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f1\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA (Sep 16)\n\nCVE-2026-58704 Google Pixel\u306e\u4e0d\u9069\u5207\u306a\u8a8d\u8a3c\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-17T00:20:29.283034Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3e73a433-4939-4383-9853-cc78955247d3/export"/>
    <published>2026-09-17T00:20:29.283034+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f2b85245-5fe3-48e6-930f-4fef629ae865/export</id>
    <title>f2b85245-5fe3-48e6-930f-4fef629ae865</title>
    <updated>2026-09-17T05:24:07.928397+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f2b85245-5fe3-48e6-930f-4fef629ae865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvo3mzxgim2v", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-58704 \u2013 Google Pixel Improper Authorization\u00a0Vulnerability\n\nA strategic executive briefing detailing governance, risk mitigation, and compliance frameworks for CVE-2026-58704 on Google Pixel mobile devices....\n\nhttps://thecybermind.co/h86g", "creation_timestamp": "2026-09-16T21:32:05.165441Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f2b85245-5fe3-48e6-930f-4fef629ae865/export"/>
    <published>2026-09-16T21:32:05.165441+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/838d8633-3c24-4580-88b7-818316f2557a/export</id>
    <title>838d8633-3c24-4580-88b7-818316f2557a</title>
    <updated>2026-09-17T05:24:07.928505+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "838d8633-3c24-4580-88b7-818316f2557a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/simonzerafa.infosec.exchange.ap.brid.gy/post/3mvo3fjxyhpp2", "content": "Google and CISA warned that an actively exploited zero-day vulnerability (CVE-2026-58704) affecting Pixel cellular modems.\n\nThis allows attackers to silently bypass permission checks and escalate privileges with no user interaction!\n\nIt was quickly added to CISA's Known Exploited Vulnerabilities [\u2026]", "creation_timestamp": "2026-09-16T21:30:35.958888Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/838d8633-3c24-4580-88b7-818316f2557a/export"/>
    <published>2026-09-16T21:30:35.958888+00:00</published>
  </entry>
</feed>
