news
Zero Day Initiative - Blog
October 6th, 2026 at 9:28 AM

Pwn2Own Ireland 2026 - Day One Results

Welcome to Day One of Pwn2Own Ireland 2026! Today, 21 entries took the Pwn2Own stage to target multiple categories - including multiple Samsung attempts and our first Pixel entry. Follow the action live! We’ll be posting real-time updates and results throughout the competition on our blog and across social media. Stay up to date by following us on Twitter , Mastodon , LinkedIn , and Bluesky , and join the conversation using #Pwn2Own Ireland and #P2OIreland for continuous coverage.  Here are the results of Day One: FAILURE - Unfortunately, Ikotas Labs, Inc. (@ikotas00) could not get their exploit of the Brother MFC-L8970CDWworking within the time allotted. Ikotas Labs, Inc. ( @ikotas00 ) targeting the Brother printer SUCCESS - @_McCaulay combined an OOB Write and a format string(!) bug to exploit the #Sonos Era 300. He earns $50,000 and 5 Master of Pwn points. McCaulay Hudson displays his successful exploit SUCCESS - Taisic Yun (@taisic_) of Xint (@xint_official) used an Improper Input Validation bug along with code injection to get his reverse shell on LiteLLM. He earned $40,000 and 4 Master of Pwn points. Xint focuses on his LiteLLM exploit FAILURE - Printers continue to prove to be a time challenge as unfortunately Hyeop Jung (@hyoub9un), Hyunwoo Kim (@hwhw_kr), Jinyoung Choi (@hmema_), and Jihun Lee (@dyrandy_) of Team T-X Lab team (@TX_Lab_) hit the time limit on their exploit attempt of Lexmark CX532adwe in the Printers category. SUCCESS / COLLISION - Nguyen Thanh Dat (@rewhiles) of Viettel Cyber Security (@vcslab) used 4 bugs to exploit the Samsung Galaxy S26, but 3 were known by the vendor. They still earn 31,250 and 3.25 Master of Pwn points. Team Viettel shows their access to the Samsung handset SUCCESS / COLLISION - Another bug collision! linhlhq (@linhlhq) and Son Dinh (@_sondt_) of VinSOC exploited the #Sonos Era 300 with 2 bugs, but one was publicly known. They still earn $17,500 and 3.5 Master of Pwn points. VinSOC took over the Sonos, but one bug was publicly known SUCCESS / COLLISION - Another Collision 💥 4 bugs - 3 collisions & 1 zero-day successfully exploit the Samsung Galaxy S26 and Interrupt Labs (@InterruptLabs) takes home $15,750 and 3.25 Master of Pwn points. FAILURE - The Garmin Index BPM withstood Aaron Christophel (@ATC1441) of Summoning Team (@SummoningTeam) targeting as exploit attempts were unsuccessful before the clock ran out. SUCCESS - A slam dunk success with 7 zero-days bugs disclosed from Vũ Chí Thành (@vcth4nh) and Huỳnh Đức Tin ( @ductinm ) of VinSOC during their exploit of Philips Hue Bridge Pro in the Smart Home category, taking home a total of $40,000 and 4 Master of Pwn points #Pwn2Own SUCCESS / COLLISION - Out of Bounds ( @oobs_io ) results are confirmed as a Collision! HaeJung Yang ( @haehaeYang ), and ByungYoung Yi ( @yibarrack ) used 4 bugs - 2 of which were previously known. They still take home $15k and 3 Master of Pwn points in their exploit of LiteLLM in the #AIInfrastructure category. SUCCESS - Confirmed! Thanh Do ( @nyanctl ) of Team Confused showed no confusion at all as he used a single use-after-free on the Lexmark CX532adwe to win $20,000 and 2 Master of Pwn points. SUCCESS / COLLISION - Confirmed (w/ a collision)! Ikotas Labs, Inc. used 4 bugs to exploit the #Samsung Galaxy S26, but one was already known to the vendor (yet unpatched). They still earn $11,000 and 4.5 Master of Pwn points. FAILURE - Unfortunately, Mikhail Evdokimov ( @konatabrk ), Polina Smirnova ( @moe_hw ) and Mate Zombor ( @r4bbit_zm ) of White Noise Club could not get their exploit of the Google Pixel 10 working within the time allotted. #Pwn2Own SUCCESS / COLLISION - It seems to be a day for collisions. ByungYoung Yi ( @yibarrack ), and KeunHo Kim ( @gn0sis__ ) of Out of Bounds ( @oobs_io ) used 5 bugs to exploit the Phillips Hue Bridge Pro, but 4 of those bugs were previously known. They still earn $12,000 and 2.5 Master of Pwn points. #Pwn2Own SUCCESS - Confirmed! Sina Kheirkhah ( @SinSinology ) of Summoning Team used a single bug to exploit the Lexmark CX532adwe printer. The second round win nets him $10,000 and 2 Master of Pwn points. #Pwn2Own SUCCESS - Verified! Nam Nguyen ( @namberinos ), Thanh Vu ( @vcth4nh ), and Tin Huynh ( @ductinm ) of VinSOC combined 5 bugs to exploit the #Oracle Autonomous AI Database. They win $40,000 and 4 Master of Pwn points. Outstanding work! SUCCESS - Confirmed! Ikotas Labs, Inc. used a single argument injection bug to exploit OpenAI Codex. They win $40,000 and 4 more Master of Pwn points. More outstanding research on display. FAILURE - Unfortunately, the team of Nam Nguyen ( @namberinos ) and Thai Son Dinh ( @ sondt ) and Hoang Tien Minh ( @cr0nica1 ) of VinSOC couldn't get their exploit of Chroma working within the time allotted. SUCCESS - Verified! The 1st full win the the Wellness category has Interrupt Labs ( @InterruptLabs ) using an OOB Read and an OOB Write to exploit the Garmin Index BPM. They win $20,000 and 2 Master of Pwn points. SUCCESS / COLLISION - Ending Day 1 with collisions seems apropos. Joohyun Park ( @cdor1 ) of Xint ( @xint_official ) used 5 different bugs in his exploit of the Philips Hue Bridge Pro, but 4 were previously known. His 3rd round success still nets him $6,000 and 2.5 Master of Pwn points. #Pwn2Own

#ai
#llm
#research

Get stories like this every Monday

The week's most important AI news in one email. Free, unsubscribe anytime.

Score: 2.15

Engagement proxy: 0

Canonical link: https://www.thezdi.com/blog/2026/10/6/pwn2own-ireland-2026-day-one-results