Security researchers demonstrate zero day vulnerabilities at Pwn2Own Ireland 2026

Security researchers demonstrated multiple zero day exploits on mobile devices and connected hardware during the Pwn2Own Ireland 2026 contest. The Zero Day Initiative and BleepingComputer both report that participants targeted devices including the Samsung Galaxy S26, the Google Pixel 10, and the Sonos Era 300. [1][2]

On the second day of the event, researchers earned $232,500 in cash awards after exploiting 45 unique zero day vulnerabilities, BleepingComputer reported. The Samsung Galaxy S26 was hacked three times during the day by KAIST Hacking Lab researcher Kyeongmin Kim, PetoWorks, and a team comprising Dimitrios Valsamaras, Ken Gannon, and Tenia Valsamara. BleepingComputer added that Jack Dates from RET2 Systems successfully demonstrated an exploit chain against a Sonos Era 300 in under a minute. [2]

The third day of the competition scheduled 17 exploit attempts with approximately $1.33 million in available prize money, according to the Zero Day Initiative. The Google Pixel 10 served as the headlining target, drawing three separate hacking attempts from Xint, Ikotas Labs, and a team including Ken Gannon and the Valsamaras. [1]

Not all attempts during the competition succeeded. The Zero Day Initiative reported that a team from White Noise Club comprising Polina Smirnova, Mikhail Evdokimov, and Mate Zombor failed to get their exploit for the Garmin Index BPM working within the allotted timeframe. [1]