We have our first confirmation of #Pwn2Own Ireland 2026! @_McCaulay combined an OOB Write and a format string(!) bug to exploit the #Sonos Era 300. He earns $50,000 and 5 Master of Pwn points.

You can find the latest results from #Pwn2Own Ireland at the blog (www.zerodayinitiative.com/blog/2026/10...) or the leaderboard (pwn2own.zerodayinitiative.com) #P2OIreland
Whew! It took some reconfiguring and tweaking, but Taisic Yun of Xint successfully got his reverse shell on LiteLLM in the AI category. After exhaling, they head off to the disclosure room to dish the deets. #Pwn2Own
Unfortunately, Ikotas Labs, Inc. could not get their exploit of the Brother MFC-L8970CDWworking within the time allotted. #Pwn2Own
Here's what's on tap for the beginning of #Pwn2Own Ireland
Excited to share that 🇫🇷 Yassine Bengana & Maxence Schmitt (@maxenceschmitt.bsky.social) 🇫🇷 will be representing #Doyensec at #PWN2OWN Ireland - targeting the Smart Home category for $30,000 & 3 Master of Pwn points, Wed. Oct. 7 @ 11:15AM
#Pwn2Own Ireland schedule is finalized.
Team Xint attempts (Ireland time):
LiteLLM - Tuesday 9:30
Philipps Hue - Tuesday 18:30
Home Assistant - Wednesday 9:30
Oracle AI Database - Wednesday 11:45
Pixel 10 - Thursday 11:15
Zed sez you can find the live leaderboard at pwn2own.zerodayinitiative.com
#Pwn2Own youtube.com/shorts/ND18c...
The full schedule for #Pwn2Own Ireland 2026 is now live! You can find it at www.zerodayinitiative.com/blog/2026/10.... And check out pwn2own.zerodayinitiative.com for live leaderboard updates throughout the day. #P2OIreland
Reminder: We're less than an hour away from the drawing for #Pwn2Own Ireland 2026. Watch it on YouTube at youtube.com/live/QpP2xDX...
From an unauthenticated music add-on to root on the host. At #Pwn2Own Ireland 2025, our team chained their way through the Home Assistant Green and walked away with $20k. Emanuele Barbeno shows the full chain, and how it nearly failed on stage: blog.compass-security.com/2026/10/pwn2...
Registration for #Pwn2Own Ireland is closed and the drawing is set. Join us next Monday at 1500 BST (GMT+1) for the drawing for order. This is the first time we've ever had double-digit phone entries, so it should be an amazing contest. youtube.com/live/QpP2xDX... #P2OIreland
Setup begin for #Pwn2Own Ireland. We've got a HUGE contest to prep for, including multiple phone attempts (& multiple Pixel attempts!) plus many others in all of the categories. Stay tuned for results.
We have hit our limit of registrations for #Pwn2Own Ireland. It looks like it will be an amazing contest (with multiple phone entries!). Stand by for further details.... #P2OIreland
CVE-2024-0244: Connor Ford details how he exploited the #Canon MF753Cdw printer back when he was a #Pwn2Own contestant. Now he's on the judging side as a ZDI analyst, but Doom is still on the table. www.zerodayinitiative.com/blog/2026/9/...
A Windows HTTP.sys vulnerability, CVE-2026-62735 (CVSS 7.8), now has public details and a PoC. It escalates local users to SYSTEM. Patch now.
#Windows #HTTPsys #CVE202662735 #PrivilegeEscalation #Pwn2Own #SYSTEM #Infosec #PoC