Android security advisory – September 2026 monthly rollup (AV26-920) – Update 1

Serial Number: AV26-920Date: September 14, 2026Updated: September 16, 2026 As of September 8, 2026, Android published a security bulletin to address vulnerabilities affecting Android devices. Open-source reporting indicates that CVE-2026-58704 is being exploited in the wild. Update 1 On September 16, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-58704 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Android Security Bulletin—September 2026 CISA KEV: CVE-2026-58704