Android September 2026 patches: fixes and Pixel advisory

Android’s September 8 bulletin has 2026-09-01 and 2026-09-05 patch levels; Google notes possible targeted exploitation of Pixel CVE-2026-58704.

Separate bulletins

Google published the Android bulletin on September 8, 2026, updated it on October 12, and published the Pixel bulletin on September 15. The former covers Android and applicable vendor components; the latter adds Pixel-specific fixes. The original headline’s “180 flaws” depends on counting method and bulletin revision. We do not present an unverified fixed total or add overlapping entries.

Patch levels

Android patch level 2026-09-01 covers issues assigned to that date and earlier bulletins. Level 2026-09-05 or later covers all applicable issues in the September bulletin. Manufacturers must deliver fixes for each model. The separate Google Play system update date alone does not establish that the device firmware is current.

Critical Wi-Fi issue

Google lists CVE-2026-28662 as a critical remote-code-execution issue in System, WiFi subcomponent, affecting specified Android 16, 16 QPR2 and 17 versions. The bulletin says the most severe issue in that section needs neither interaction nor extra privileges. It does not publicly document a precise attack path or establish identical exposure for every device.

Pixel advisory

The Pixel bulletin classifies CVE-2026-58704 as a high-severity modem elevation-of-privilege issue. Google says there are indications it may be under limited, targeted exploitation. This does not mean every Pixel was attacked. The bulletin alone does not establish the claimed zero-click sequence, cellular connection as a sufficient vector or attacker identity. Check fixes for your model.

What to do now

In Settings check Android version, security patch level and Google Play system update; menu paths vary. Install the latest manufacturer update, restart if asked and check the date again. As of October 14, 2026, newer patches may already exist: do not deliberately stop at September. If the model is no longer supported, consider one with active security updates.

Official sources

Android: https://source.android.com/docs/security/bulletin/2026/2026-09-01 ; Pixel: https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01 ; update guide: https://support.google.com/pixelphone/answer/7680439?hl=it .