Reported by 4 outlets
Pwn2Own Ireland 2026 - The Full Schedule
Why this score
- Breadth
- 2.00 / 2.0 · 4 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.80 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.01 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.1 / 10 = base × recency + community
Desk analysis
Pwn2Own Ireland 2026 is running in Cork from October 6 to 9 with seven target categories, including a new wellness category for healthcare devices, more than 60 total entries, and stricter entry requirements than prior editions. Day one closed with 32 unique zero-days exploited and $388,500 awarded across 21 attempts.
The Samsung Galaxy S26 was the headline target and fell multiple times, to Nguyen Thanh Dat of Viettel Cyber Security and to researchers from Interrupt Labs and Ikotas Labs. VinSOC's Vũ Chí Thành and Huỳnh Đức Tin topped the leaderboard with a $40,000 seven-zero-day chain against a Philips Hue Bridge Pro and a second $40,000 five-zero-day chain against the Oracle Autonomous AI Database. Researchers also demonstrated LiteLLM zero-days, hacked Lexmark CX532adwe and Canon imageFORCE 1643F printers, took down the OpenAI Codex cloud coding agent with a single argument-injection bug, and used four vulnerabilities to compromise a Sonos Era 300 again. Google Pixel 10 and Brother printer attempts failed. Organizers noted some exploited bugs were already known to vendors.
Day two carries 24 attempts with roughly $780,000 at stake, including three more Galaxy S26 attempts and five researchers queued against Home Assistant Green. The wellness and smart-home categories deserve the most attention from defenders: consumer-exposed healthcare and home automation devices historically have the weakest disclosure and patch timelines, and Pwn2Own bugs routinely reach CISA's KEV catalog within months.
Timeline
-
original reporting
Pwn2Own Ireland 2026 - The Full Schedule
malware.news · 8d ago · October 5th, 2026
Fáilte! Pwn2Own Ireland 2026 has arrived in Cork, and the world's top security researchers are ready. We've got more phone entries than we've ever had, and more than 60 entries total. Earlier today, we held the random draw to determine attempt order. Below is the official schedule. All times are Irish Standard Time (IST) and may change as the competition progresses. You can find our live leaderboard here . This will be updated throughout the day. Jump to: Day One Day Two Day Three DAY ONE Tuesday, October 6 - 9:30 AM Nguyen Thanh Dat ( @rewhiles ) of Viettel Cyber Security ( @vcslab ) targeting Samsung Galaxy S26 - Remote in the Mobile Phone category for a total of $50,000 and 5 Master of Pwn points @McCaulay targeting Sonos Era 300 in the Smart Home category for a total of $50,000 and 5 Master of Pwn points Taisic Yun ( @taisic ) of Xint ( @xint_official ) targeting LiteLLM in the AI Infrastructure category for a total of $40,000 and 4 Master of Pwn points Ikotas Labs, Inc. targeting Brother MFC-L8970CDW in the Printers category for a total of $20,000 and 2 Master of Pwn points Tuesday, October 6 - 11:15 AM HaeJung Yang ( @haehaeYang ), and ByungYoung Yi ( @yibarrack ) of Out of Bounds ( @oobs_io )
-
update from zerodayinitiative.com
Pwn2Own Ireland 2026 – New Targets and Categories
zerodayinitiative.com · 84d ago · July 21st, 2026
Zero Day Initiative announced on July 21, 2026 that Pwn2Own Ireland would return to Cork on October 6-9, 2026, with seven target categories including a new Wellness category for healthcare devices. Entry required a lifetime aggregate of at least $15,000 in ZDI bounty payments or one of up to 10 discretionary slots for new contestants, with total entries capped at 80 and registration closing October 1, 2026. Phone entries had to be compromised through the default browser or over NFC, Wi-Fi, or Bluetooth, with targets running fully updated operating systems.
-
update from malware.news
Pwn2Own Ireland 2026 - Day One Results
malware.news · 7d ago · October 6th, 2026
Today, 21 entries took the Pwn2Own stage to target multiple categories - including multiple Samsung attempts and our first Pixel entry. Follow the action live! We’ll be posting real-time updates and results throughout the competition on our blog and across social media. Stay up to date by following us on Twitter , Mastodon , LinkedIn , and Bluesky , and join the conversation using #Pwn2Own Ireland and #P2OIreland for continuous coverage. (@ikotas00) could not get their exploit of the Brother MFC-L8970CDWworking within the time allotted.
-
update from bleepingcomputer.com
Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
bleepingcomputer.com · 7d ago · October 6th, 2026
On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days. During the Pwn2Own Ireland 2026 hacking contest, competitors target products in seven categories , including mobile phones (Apple iPhone 17, Samsung Galaxy S26, and Google Pixel 10), printers, smart home devices, messaging apps, AI infrastructure, AI coding apps, and a new category where hackers will try to exploit wellness healthcare devices. However, some of the bugs exploited in each challenge were already known to the vendor. Vũ Chí Thành and Huỳnh Đức Tin of VinSOC, who topped the leaderboard, won $40,000 after chaining seven zero-days to exploit a Philips Hue Bridge Pro smart lighting hub, plus an additional $40,000 for a five zero-day exploit chain targeting the Oracle Autonomous AI Database. Security researchers also demoed LiteLLM zero-days , hacked the Lexmark CX532adwe and Canon imageFORCE 1643F multifunction printers, took down the OpenAI Codex cloud-based AI coding agent with a single argument-injection bug, and exploited four vulnerabilities to compromise a Sonos Era 300 smart speaker again. Mikhail Evdokimov, Polina Smirnova, and Mate Zombor of White Noise Club also targeted the Google Pixel 10 today , but couldn't get their exploit to work within t
-
update from deafnews.it
Pwn2Own Ireland 2026 opened with 32 zero-day exploits and $388,500 in prizes. Samsung Galaxy S26 was compromised twice, though some bugs wer
deafnews.it · 7d ago · October 6th, 2026
Samsung Galaxy S26 was compromised twice, though some bugs wer
via Mastodon https://deafnews.it/en/article/pwn2own-ireland-2026-32-zero-days-388500-on-day-one
-
update from malware.news
Pwn2Own Ireland 2026 - Day Two Results
malware.news · 6d ago · October 7th, 2026
Samsung's Galaxy S26 will be attempted three separate times — by Valsamaras/Ken Gannon (using Djini.ai)/Valsamara at 1:00 PM, Kyeongmin Kim at 3:15 PM, and PetoWorks at 5:30 PM — worth watching since only the first successful demo claims the cash. Home Assistant Green is the day's most-attempted device, with five researchers scheduled to take a run at it. AI Infrastructure stays active with four attempts on tap (Dynamo, two at Chroma, two at Oracle's Autonomous AI Database), Wellness has just one attempt scheduled, and Printers see steady action with three separate attempts on the Lexmark CX532adwe. Yesterday, we awarded $388,500 for 32 unique 0-days.
-
mentioned by www.bleepingcomputer.com
Hackers exploit 32 zero-days on first day of # Pwn2Own Ireland https://www. bleepingcomputer.com/news/secu rity/hackers-exploit-32-zero-days
www.bleepingcomputer.com · 6d ago · October 7th, 2026
-
update from bleepingcomputer.com
Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland
bleepingcomputer.com · 4d ago · October 9th, 2026
Xint took second place with $240,000 and 27.5 Master of Pwn points, while Team ZyGoat secured third with $125,000 in prizes and 27.5 Master of Pwn points. This year, 29 resea
-
mentioned by www.bleepingcomputer.com
Hackers get $1,262,000 for 98 zero-days at # Pwn2Own Ireland https://www. bleepingcomputer.com/news/secu rity/hackers-earn-1262000-for-98-ze
www.bleepingcomputer.com · 4d ago · October 9th, 2026