Pwn2Own Ireland 2026 day one results: targets including Samsung Galaxy S26, LiteLLM, and OpenAI Codex compromised

Pwn2Own Ireland 2026 day one had 21 entries in total, covering categories such as mobile phones, printers, smart home, and AI infrastructure. Viettel Cyber Security compromised the Samsung Galaxy S26 with 4 vulnerabilities (3 known to the vendor), and Interrupt Labs also compromised that model with 4 vulnerabilities (3 collisions); Ikotas Labs compromised OpenAI Codex with a single parameter injection vulnerability, earning $40,000; Xint achieved a reverse shell on LiteLLM using an input validation flaw plus code injection, earning $40,000; VinSOC compromised the Oracle Autonomous AI Database with 5 vulnerabilities, earning $40,000. Multiple targets, including Brother, Lexmark, Google Pixel 10, and Chroma, were unsuccessful due to timeout.