{"type":"bundle","id":"bundle--96579c75-0ecb-50b9-90d8-e027d077f71f","objects":[{"type":"identity","spec_version":"2.1","id":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-01-01T00:00:00.000Z","modified":"2026-01-01T00:00:00.000Z","name":"CTI-Hermes Autonomous Agent","identity_class":"organization"},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--03090538-1872-5187-aa04-8d307350a0be","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-24T19:51:04.410767Z","modified":"2026-09-24T19:51:04.410767Z","name":"CVE-2026-58704","description":"In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","external_references":[{"source_name":"cve","external_id":"CVE-2026-58704","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58704"}]},{"type":"attack-pattern","spec_version":"2.1","id":"attack-pattern--9ffe8e3a-6780-5277-ad7f-618967ae1f09","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-24T19:51:04.410767Z","modified":"2026-09-24T19:51:04.410767Z","name":"Exploit Public-Facing Application","external_references":[{"source_name":"mitre-attack","external_id":"T1190","url":"https://attack.mitre.org/techniques/T1190/"}]},{"type":"relationship","spec_version":"2.1","id":"relationship--3af673eb-de35-530f-89d4-41fe9e00e127","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-24T19:51:04.410767Z","modified":"2026-09-24T19:51:04.410767Z","relationship_type":"targets","source_ref":"attack-pattern--9ffe8e3a-6780-5277-ad7f-618967ae1f09","target_ref":"vulnerability--03090538-1872-5187-aa04-8d307350a0be"},{"type":"report","spec_version":"2.1","id":"report--505ca79d-7d25-53b8-93cf-9a9e1cff7b3b","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-24T19:51:04.410767Z","modified":"2026-10-30T15:08:43.470658Z","name":"Google Pixel CVE-2026-58704 exploited in the wild","description":"CISA lists CVE-2026-58704, a vulnerability in Google Pixel, in the Known Exploited Vulnerabilities catalog (added 2026-09-16, due 2026-09-19), and NVD records a CVSS of 8.8. This report summarizes public CTI only.","published":"2026-09-24T19:51:04.410767Z","report_types":["threat-report"],"object_refs":["identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","vulnerability--03090538-1872-5187-aa04-8d307350a0be","attack-pattern--9ffe8e3a-6780-5277-ad7f-618967ae1f09","relationship--3af673eb-de35-530f-89d4-41fe9e00e127"],"confidence":90}]}