Hackers Earned $516,500 for 37 Unique 0-day Vulnerabilities – Pwn2Own Automotive 2026

Pwn2Own Automotive 2026 revealed 66 zero-days across infotainment, embedded Linux, and EV charging systems, with researchers demonstrating command injection, buffer overflows, authentication bypasses, privilege escalation, and multi-bug exploit chains—exposing a broad attack surface in connected vehicle and charging infrastructure and informing vendor hardening efforts.