Xiaomi rolls out September 2026 security update to its devices

Xiaomi has started rolling out the September 2026 security patch as part of HyperOS 4, fixing 180 Android vulnerabilities, including a critical RCE flaw that needs no privileges or user interaction. The update is reaching Xiaomi 15, 15 Ultra, 17T, 17T Pro, MIX Flip 2, Pad 7S Pro 12.5, Redmi K80, K80 Pro, K100 Pro Max and POCO F7 Pro, F7 Ultra and F9 Ultra.

• The patch fixes 180 vulnerabilities, 95 of them in the Android system and framework
• The critical RCE flaw requires no privileges and no user interaction
• 85 fixes target drivers from Qualcomm, Arm, MediaTek and Imagination
• The rollout starts in China, with global models getting it via open beta