 |
| You will find the patch level in Settings, under System and software update. On a Pixel 6 through a Pixel 10 it has to read September 5, 2026. |
Google started pushing out the September security update for Pixel phones on September 15, which is about two weeks behind the usual schedule. While the bulletin covers a long list of fixes, one entry stands out more than the rest: Google confirms that a specific vulnerability is already being exploited in limited, targeted attacks.
The Flaw That's Already in Use
Tracked as CVE-2026-58704, this particular vulnerability lives in the modem and allows for privilege escalation. Google rates it as high severity. The company hasn't shared additional details, and the bug report remains private for now.
All told, the September Pixel bulletin includes 110 entries, with 46 marked as critical. Another nine flaws allow for remote code execution across components like the modem, bootloader, and telephony. If you want to dig into the full technical breakdown, Google's September Pixel bulletin and the general Android bulletin are both available. The broader Android patch landed on September 8.
Which Devices Are Getting the Update
The update carries the build number CP3A.260905.009 and is rolling out globally to 21 devices. That list spans from the Pixel 6 all the way to the Pixel 10a, plus the Pixel Fold and Pixel Tablet. It also marks the stable release of Android 17 QPR1, complete with the matching Pixel Drop.
Once you install it, your security patch level should read 2026-09-05. According to Google, that date means everything in the bulletin is covered on your device.
Why the Pixel 11 Isn't on the List
Here's where things get a little awkward. The Pixel 11 series, which launched in August, doesn't appear on the update list at all. It has already received two updates this month—one on September 1 and another on September 10—but neither came with a changelog. Both updates show a September 1 security patch level, which by Google's own standard doesn't quite measure up.
Google hasn't confirmed whether the modem flaw that's under attack affects the newer Pixel 11 phones, nor has it said when the series will move to Android 17 QPR1. This isn't the first time security questions have surrounded this generation. The last controversy involved a protection Google removed from the Tensor G6.
If you want to stay current on Pixel update schedules, Google's software update page is worth bookmarking.
The Pixel 6 and 6 Pro Are Nearing the End
For the 2021 Pixel 6 and 6 Pro, this quarterly update is the last major one. Google confirmed the end of the road when the first Android 17 QPR2 beta arrived without those devices on the list.
Google promises five years of updates from the US Google Store launch, which was October 2021. That means support wraps up in October 2026. At least one more security patch is still coming, but if you're still holding onto one of these phones, now's the time to install this update and start thinking about an upgrade. Six older models were also left out of August's monthly patch.
How to Check If You Have the Update
You can find your patch level in Settings, under System and software update. If the date shown is earlier than September 5, 2026, you're missing the latest patch. On a Pixel 6 through Pixel 10, manually checking for updates should do the trick. For Pixel 11 owners, there's nothing new to download right now.
For a step-by-step walkthrough on checking for updates, Google's support page has you covered. And if you prefer to sideload the update, Droid Life has the download links ready to go.
The bottom line: if you're on a supported Pixel, grab this update sooner rather than later. That modem flaw isn't just theoretical—it's already being used in the wild.