Pwn2Own Automotive 2026: Researchers Score $516,500 For 37 Unique Zero-Days
ID: cb27ee46-34c1-55fa-84c3-f141ce3b2cf8
STIX ID: report--cb27ee46-34c1-55fa-84c3-f141ce3b2cf8
Feed Name: GBHackers
Threat Score
Day Two of Pwn2Own Automotive 2026 showcased 37 zero-day vulnerabilities against automotive infotainment, EV chargers, and gateways — including command injections, buffer overflows, and multi-bug chains that achieved remote code execution and root on devices from vendors such as Alpine, Sony, ChargePoint, Phoenix Contact and others; researchers earned $516,500 in bounties while ZDI coordinated disclosures and urged vendors to patch to mitigate risks to vehicles and charging infrastructure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.