Pwn2Own Ireland 2026 - Day Three Results & Master of Pwn
Pwn2Own Ireland day three lists 17 scheduled attempts, led by three Google Pixel 10 entries.
34
Product
Home Assistant Green
- Mentions · 7d0
- Mentions · 30d3
- All mentions7
- First seenAug 12, 2026
- Last mentioned22d ago
Timeline
7 articles · newest firstSamsung Galaxy S26 hacked three more times at Pwn2Own Ireland
Researchers collected $232,500 at Pwn2Own Ireland after 45 zero-days, including three Samsung Galaxy S26 hacks.
64
Pwn2Own Ireland 2026 - Day Two Results
Pwn2Own Ireland 2026 day two lists 24 attempts after $388,500 was awarded for 32 zero-days.
54
ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability
ZDI disclosed a Pwn2Own SSRF flaw (CVSS 5.4) in Home Assistant Green's SSDP server, letting unauthenticated network-adjacent attackers trigger arbitrary server-side requests.
20
ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery Vulnerability
ZDI-26-562 details an unauthenticated, network-adjacent SSRF in the Home Assistant Green mDNS server, rated CVSS 5.4 and originally demonstrated at Pwn2Own.
25
ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability
ZDI disclosed another Pwn2Own command injection flaw (CVSS 7.5) in Home Assistant Green's go2rtc, enabling network-adjacent code execution after obtaining localhost access.
28
ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability
ZDI disclosed a Pwn2Own command injection flaw (CVSS 7.5) in Home Assistant Green's go2rtc, enabling network-adjacent attackers to execute arbitrary code via localhost access.
28
Appears with
- Zero Day Initiativeorganization · 7
- Home Assistantvendor · 4
- Zero Day Initiativevendor · 4
- Samsungvendor · 3
- Oracle Autonomous AI Databaseproduct · 3
- Oraclevendor · 3
- Googlevendor · 2
- Philips Hue Bridge Proproduct · 2
- Galaxy S26product · 2
- go2rtcproduct · 2
- Chromaproduct · 2
- Philipsvendor · 2
- Ikotas Labsorganization · 2
- Dynamoproduct · 2
- Lexmarkvendor · 2
- BunkyoWesternsorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.