Xiaomi’s September 2026 security update is rolling out to these devices

Xiaomi has begun rolling out the September 2026 security patch update to numerous devices across its portfolio of brands. This one fixes a massive list of critical vulnerabilities across the Android framework, system architecture, and vendor-specific hardware components, and must therefore be installed as soon as you receive the update.

The latest security patch is arriving as part of the larger HyperOS 4 release, which is primarily rolling out in China. Some global models have also recently started receiving the update as part of the open beta release. Soon, the September security update will also start rolling out to HyperOS 3 devices.

Xiaomi devices receiving the September 2026 security update

Here’s a list of all Xiaomi devices that are currently receiving the HyperOS 4 update, as shared by Ximtime:

Xiaomi devices

• Xiaomi 15:
  • Global (OS4.0.0.7.XOCMIXM)
  • EEA (OS4.0.0.9.XOCEUXM)
• Xiaomi 15 Ultra:
  • Global (OS4.0.0.6.XOAMIXM)
  • EEA (OS4.0.0.6.XOAEUXM)
• Xiaomi 17T:
  • EEA (OS4.0.0.7.XPTEUXM)
• Xiaomi 17T Pro:
  • EEA (OS4.0.0.6.XPSEUXM)
• Xiaomi MIX FLIP 2:
  • China (OS4.0.0.10.XOHCNXM)
• Xiaomi Pad 7S Pro 12.5:
  • China (OS4.0.0.11.XOTCNXM)

Redmi devices

• REDMI K80:
  • China (OS4.0.0.8.XOKCNXM)
• REDMI K80 Pro:
  • China (OS4.0.0.8.XOMCNXM)
• REDMI K100 Pro Max:
  • China (OS4.0.0.8.XGNCNXM)

POCO devices

• POCO F7 Pro:
  • China (OS4.0.0.8.XOKCNXM)
• POCO F7 Ultra:
  • China (OS4.0.0.8.XOMCNXM)
• POCO F9 Ultra:
  • China (OS4.0.0.8.XGNCNXM)

The list will continue to grow as more Xiaomi devices receive the HyperOS 4 update and as the update starts rolling out to devices running older HyperOS software.

Go to Settings > About phone, then tap the HyperOS logo to check for updates manually if the update notification hasn’t arrived yet. As always, the latest rollout follows a staged manner and hence may take additional time to reach all users.

What’s inside the September 2026 security patch?

This is a massive security release that patches 180 vulnerabilities across the Android ecosystem. Not all of those may apply to Xiaomi devices, but that’s still a pretty major release compared to recent security patches.

According to Google, the September 2026 security patch resolves 95 vulnerabilities in the core system and framework. The most critical fix resolves a security flaw in the system component that allows for Remote Code Execution (RCE). This flaw requires zero additional privileges and no user interaction to exploit.

The additional 85 security fixes target hardware-specific components. This covers critical kernel vulnerabilities, as well as driver patches for Qualcomm, Arm, MediaTek, Imagination Technologies, and Uisoc components.

Even if a security release isn’t as big as this one, it’s always best to have the latest security patch installed on your device.

We’ll keep you updated when a new security patch is out for your device, and when the rollout expands to more Xiaomi devices. You can visit the Xiaomi section for regular updates, or simply join our Telegram channel to get instant alerts.