Security1 publisher2 min readPublished
Pwn2Own Ireland's first-day draw sends three teams at the Galaxy S26 and two at LiteLLM
ZDI's Pwn2Own Ireland 2026 schedule sets 21 exploit attempts in Cork on October 6, the largest a $300,000 remote Pixel 10 entry. The schedule names exact models and time slots, so operators of the targeted products know which results to look for on ZDI's live leaderboard.
The Watch · Security desk
Drafted by a language model from the sources cited here and checked against its claim ledger before publication. How we use AISend a correction
What happened
- ZDI says the Cork event has more than 60 entries in all, including more phone entries than it has ever had.
- VinSOC is drawn against Oracle Autonomous AI Database at 4:15 PM and Chroma at 6:30 PM, the other AI Infrastructure targets on day one.
- Ikotas Labs targets OpenAI Codex at 6:00 PM in a separate Coding Agent category, for $40,000.
- Three teams are drawn against the Lexmark CX532adwe printer, each for $20,000 and 2 Master of Pwn points.
Compiled by The WatchSomething wrong?How this is made
Why it matters
- decision LiteLLM operators get the earliest read of any AI target, with both attempts slotted before noon IST on October 6, so the leaderboard should show by midday whether either landed.
- exposure Galaxy S26 owners carry the most day-one phone exposure, because Samsung's remote target gets three separate chances to fall against one for the Pixel 10.
- precedent Pricing LiteLLM at $40,000, twice any printer entry, gives researchers a paid reason to hunt bugs in AI infrastructure software.
No product on the schedule has a confirmed new flaw yet. ZDI set the attempt order by random draw before the first slot, and results go to its live leaderboard during the day [21][2][3]. All times are Irish Standard Time and may change as the competition runs [2]. The post does not include a vendor disclosure or patch timeline [16].
LiteLLM is the AI target with two attempts. Taisic Yun of Xint goes at 9:30 AM, then HaeJung Yang and ByungYoung Yi of Out of Bounds at 11:15 AM, each for $40,000 and 4 Master of Pwn points [5]. Every printer entry pays half that, $20,000 [19].
Brother's MFC-L8970CDW draws a single attempt, from Ikotas Labs at 9:30 AM [8]. The Lexmark slots go to Team T-X Lab at 11:45 AM, Thanh Do of Team Confused at 2:30 PM and Sina Kheirkhah of Summoning Team at 4:45 PM [9]. A three-person team closes the day on a Canon imageFORCE 1643F copier at 7:00 PM [10].
The remote Galaxy S26 attempts come from Nguyen Thanh Dat of Viettel Cyber Security at 9:30 AM, Interrupt Labs at 11:45 AM and Ikotas Labs at 2:30 PM [4]. Each pays $50,000. White Noise Club's remote Pixel 10 entry at 5:15 PM pays six times that [18][11]. Day two opens at 9:30 AM on October 7 with Kyeongmin Kim of KAIST Hacking Lab going after the Pixel 10 over USB for $75,000 [12].
The Sonos Era 300 faces @_McCaulay at 9:30 AM and VinSOC at 11:45 AM, at $50,000 each [13]. Philips' Hue Bridge Pro draws VinSOC, Out of Bounds and Joohyun Park of Xint, at $40,000 each [14]. Aaron Christophel of Summoning Team and Interrupt Labs take on Garmin's Index BPM in the Wellness category for $20,000 apiece [15].
These are contest entries from named research teams, and a few teams spread across several categories. VinSOC holds four day-one slots, on Sonos, Hue, Oracle and Chroma [20]. Ikotas Labs holds three, on Brother, Samsung and Codex [20].
What to watch
- Leaderboard results for the 9:30 AM and 11:15 AM IST LiteLLM slots on October 6.
- Whether any of the three remote Galaxy S26 attempts succeeds.
- Advisories from LiteLLM, Samsung, Sonos, Lexmark or Brother that credit Pwn2Own Ireland 2026 entrants.