The Zero Day Initiative published Pwn2Own Ireland day-two results on October 7, 2026, recording three successful demonstrations against Samsung Galaxy S26 devices. The entries distinguish newly identified bugs from collisions with vulnerabilities already known in the contest process.
One team involving Mobile Hacking Lab and CENSUS Labs succeeded with a confused-deputy bug. Kyeongmin Kim of KAIST Hacking Lab demonstrated a remote attack using one unique bug and two collisions, earning $8,500 and 3.5 Master of Pwn points.
PetoWorks also remotely accessed a Galaxy S26 using three bug collisions. ZDI lists a $6,250 award and 2.5 Master of Pwn points for that entry. It would therefore be misleading to describe every bug in all three demonstrations as a newly discovered zero-day.
The day-two report also records successful demonstrations involving Home Assistant Green, printers, Sonos devices and AI infrastructure. It lists a $40,000 Dynamo demonstration by HaeJung Yang of Out of Bounds and an Oracle Autonomous AI Database entry by Ikotas Labs.
These are controlled contest demonstrations reported by the organizer. They do not by themselves establish that customers have been attacked in the wild, that every device is compromised or that a public exploit is available.
Detailed customer exposure and fixes require vendor advisories and validated software-version information. This brief reports the contest results without publishing exploit instructions or treating a demonstration as evidence of a live attack campaign.