Security researchers earned $232,500 for exploiting 45 unique zero-day vulnerabilities on the second day of Pwn2Own Ireland 2026, BleepingComputer reported Thursday. Samsung's Galaxy S26 was hacked three more times, and AI infrastructure products from Nvidia, Oracle and Chroma were compromised.

What Happened

The Zero Day Initiative, which runs the contest, had scheduled 24 attempts for day two with about $780,000 in prizes on offer. Individual awards below are from ZDI's live results post.

In the AI infrastructure category, HaeJung Yang of Out of Bounds earned $40,000 and four Master of Pwn points for exploiting Dynamo, Nvidia's framework for serving AI models. Oracle Autonomous AI Database fell twice: Ikotas Labs used a seven-bug chain that included use-after-free and type confusion flaws for $10,000, and Taisic Yun of Xint earned $14,000 with a chain that mixed two zero-days and three collisions. The Chroma vector database was exploited by Team MAMMOTH for $12,000 and by Alessandro Fanio Gonzalez for $4,500, while a third Chroma attempt failed.

RelatedSuspected Chinese Spies Exploited BeyondTrust Remote Support Flaw Since August, Google Says

The Galaxy S26 was compromised by Kyeongmin Kim of KAIST Hacking Lab, who used one unique bug and two collisions for $8,500; by PetoWorks, whose three bugs were all collisions, for $6,250; and by Dimitrios Valsamaras and Ken Gannon of Mobile Hacking Lab with Tenia Valsamara, using what ZDI classified as a confused-deputy flaw.

Home Assistant Green was the most-targeted device of the day. Yves Bieri of Xint earned $30,000 for a fully unique exploit, and entries from Doyensec, PetoWorks, Kyeongmin Kim and @_McCaulay also succeeded but with full or partial collisions; a sixth attempt failed. The Sonos Era 300 speaker was hacked three times, including a two-bug exploit by Sina Kheirkhah of Summoning Team for $12,500 and a chain by Jack Dates of RET2 Systems that ran in under a minute, according to BleepingComputer.

Printers and a health device rounded out the day. The Lexmark CX532adwe was exploited three times, a Canon imageFORCE printer fell for $10,000 and a Garmin Index BPM blood pressure monitor was hacked, while an attempt on a Brother printer failed.

Why It Matters

This year's addition of AI infrastructure as a category is producing results. On day one, as we reported, OpenAI's Codex, LiteLLM and Oracle's database were compromised. Day two extended that to model serving and vector storage, two layers that sit between an organization's data and its AI applications, so flaws there can expose more than a single application.

The collisions are also telling. Several Galaxy S26 and Home Assistant chains relied partly on bugs already reported, which lowers the payout and suggests those products are being studied by many teams at once.

Context

Before day two began, Kyeongmin Kim withdrew a USB-based attack on the Google Pixel 10. No one registered to attack Apple's iPhone 17, which carried a top award of $300,000. Day one paid $388,500 for 32 unique zero-days. At last year's Ireland event, researchers demonstrated 73 zero-days and earned $1,024,750.

What to Watch

The final day brings more attempts on smart home devices, AI infrastructure and printers, plus new tries at the Galaxy S26 and Pixel 10, and will decide the Master of Pwn title. Vendors now have 90 days to patch the demonstrated flaws before ZDI publishes details.