<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T01:39:30.307981+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/64fea34b-ee3b-4ba8-bc4e-aac385e02cd9/export</id>
    <title>64fea34b-ee3b-4ba8-bc4e-aac385e02cd9</title>
    <updated>2026-09-17T01:39:30.330112+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "64fea34b-ee3b-4ba8-bc4e-aac385e02cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/", "content": "Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15. \n\nThe post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:37.182629Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/64fea34b-ee3b-4ba8-bc4e-aac385e02cd9/export"/>
    <published>2026-09-17T01:00:37.182629+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4e0fea2d-5742-474d-9990-cb43be0abeb9/export</id>
    <title>4e0fea2d-5742-474d-9990-cb43be0abeb9</title>
    <updated>2026-09-17T01:39:30.332214+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4e0fea2d-5742-474d-9990-cb43be0abeb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html", "content": "Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw.\n\n\"In Cellular Modem, there is a possible permission bypass due to a logic error in the code,\" according to a description of the bug in the NIST National Vulnerability Database", "creation_timestamp": "2026-09-17T01:00:36.798434Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4e0fea2d-5742-474d-9990-cb43be0abeb9/export"/>
    <published>2026-09-17T01:00:36.798434+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/164ed1d8-a193-4c44-85fa-624ca5446c10/export</id>
    <title>164ed1d8-a193-4c44-85fa-624ca5446c10</title>
    <updated>2026-09-17T01:39:30.332355+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "164ed1d8-a193-4c44-85fa-624ca5446c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "exploited", "source": "https://t.me/thehackernews/10070", "content": "\u203c\ufe0f ALERT - Google says a Pixel modem flaw may be under limited, targeted exploitation.\n\nCVE-2026-58704 can enable adjacent privilege escalation without user interaction. Google patched it in the September Pixel update.\n\nWhat\u2019s known about the attacks \u2192 https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html", "creation_timestamp": "2026-09-17T01:00:04.255357Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/164ed1d8-a193-4c44-85fa-624ca5446c10/export"/>
    <published>2026-09-17T01:00:04.255357+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a306a650-41b4-4207-903c-9e3adab9e63f/export</id>
    <title>a306a650-41b4-4207-903c-9e3adab9e63f</title>
    <updated>2026-09-17T01:39:30.332460+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a306a650-41b4-4207-903c-9e3adab9e63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvofhde7ew2d", "content": "Google Pixel Vulnerability Exploited: CVE-2026-58704 Enables Zero-Click Privilege Escalation\uff08Google Pixel\u306e\u8106\u5f31\u6027CVE-2026-58704\u3001\u30bc\u30ed\u30af\u30ea\u30c3\u30af\u653b\u6483\u3067\u60aa\u7528\uff09 #SecurityOnline (Sep 16)\n\nsecurityonline.info/google-pixel...", "creation_timestamp": "2026-09-17T00:27:51.139637Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a306a650-41b4-4207-903c-9e3adab9e63f/export"/>
    <published>2026-09-17T00:27:51.139637+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3e73a433-4939-4383-9853-cc78955247d3/export</id>
    <title>3e73a433-4939-4383-9853-cc78955247d3</title>
    <updated>2026-09-17T01:39:30.332569+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3e73a433-4939-4383-9853-cc78955247d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvof25xduo2e", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f1\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA (Sep 16)\n\nCVE-2026-58704 Google Pixel\u306e\u4e0d\u9069\u5207\u306a\u8a8d\u8a3c\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-17T00:20:29.283034Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3e73a433-4939-4383-9853-cc78955247d3/export"/>
    <published>2026-09-17T00:20:29.283034+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f2b85245-5fe3-48e6-930f-4fef629ae865/export</id>
    <title>f2b85245-5fe3-48e6-930f-4fef629ae865</title>
    <updated>2026-09-17T01:39:30.332679+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f2b85245-5fe3-48e6-930f-4fef629ae865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvo3mzxgim2v", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-58704 \u2013 Google Pixel Improper Authorization\u00a0Vulnerability\n\nA strategic executive briefing detailing governance, risk mitigation, and compliance frameworks for CVE-2026-58704 on Google Pixel mobile devices....\n\nhttps://thecybermind.co/h86g", "creation_timestamp": "2026-09-16T21:32:05.165441Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f2b85245-5fe3-48e6-930f-4fef629ae865/export"/>
    <published>2026-09-16T21:32:05.165441+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/838d8633-3c24-4580-88b7-818316f2557a/export</id>
    <title>838d8633-3c24-4580-88b7-818316f2557a</title>
    <updated>2026-09-17T01:39:30.332780+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "838d8633-3c24-4580-88b7-818316f2557a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/simonzerafa.infosec.exchange.ap.brid.gy/post/3mvo3fjxyhpp2", "content": "Google and CISA warned that an actively exploited zero-day vulnerability (CVE-2026-58704) affecting Pixel cellular modems.\n\nThis allows attackers to silently bypass permission checks and escalate privileges with no user interaction!\n\nIt was quickly added to CISA's Known Exploited Vulnerabilities [\u2026]", "creation_timestamp": "2026-09-16T21:30:35.958888Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/838d8633-3c24-4580-88b7-818316f2557a/export"/>
    <published>2026-09-16T21:30:35.958888+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eef38d57-06ba-4857-b1b3-a87a0adcfcfe/export</id>
    <title>eef38d57-06ba-4857-b1b3-a87a0adcfcfe</title>
    <updated>2026-09-17T01:39:30.332876+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eef38d57-06ba-4857-b1b3-a87a0adcfcfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvnzsuq5dv25", "content": "(CISA TS-MAN) The Cyber Mind TSUITE Brief: CVE-2026-58704 \u2013 Google Pixel Improper Authorization\u00a0Vulnerability\n\nActionable threat intelligence and end-to-end hardening strategies for CVE-2026-58704, addressing improper authorization flaws in Google Pixel cellular\u2026\n\nhttps://thecybermind.co/iuw6", "creation_timestamp": "2026-09-16T20:59:34.357006Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eef38d57-06ba-4857-b1b3-a87a0adcfcfe/export"/>
    <published>2026-09-16T20:59:34.357006+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fc5a2a1f-4ace-4ec8-b38c-9b3a6af936bc/export</id>
    <title>fc5a2a1f-4ace-4ec8-b38c-9b3a6af936bc</title>
    <updated>2026-09-17T01:39:30.332971+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fc5a2a1f-4ace-4ec8-b38c-9b3a6af936bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://bsky.app/profile/whisprnews.bsky.social/post/3mvnygtan4n2p", "content": "\ud83d\udd12 #Google corrigi\u00f3 el CVE-2026-58704, un fallo de alta gravedad (CVSS 8.0) en el m\u00f3dem celular de los #Pixel, con indicios de explotaci\u00f3n dirigida. Permit\u00eda escalar privilegios sin interacci\u00f3n del usuario. Parche: 2026-09-05.", "creation_timestamp": "2026-09-16T20:34:59.810865Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fc5a2a1f-4ace-4ec8-b38c-9b3a6af936bc/export"/>
    <published>2026-09-16T20:34:59.810865+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/01caf8d8-4766-4593-ba87-89712e895baf/export</id>
    <title>01caf8d8-4766-4593-ba87-89712e895baf</title>
    <updated>2026-09-17T01:39:30.333063+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://cvepremium.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "01caf8d8-4766-4593-ba87-89712e895baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58704", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/android-security-advisory-september-2026-monthly-rollup-av26-920", "content": "", "creation_timestamp": "2026-09-16T20:15:02.626942Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/01caf8d8-4766-4593-ba87-89712e895baf/export"/>
    <published>2026-09-16T20:15:02.626942+00:00</published>
  </entry>
</feed>
