Published Saturday, June 27, 2026 at 01:05 PM PT
BLUF: Researchers at Pwn2Own Automotive 2026 continued Day Two exploitation demonstrations against automotive targets. Specific vulnerability details from this session are not fully confirmed in available data — treat all unpatched automotive systems as potentially at elevated risk pending vendor advisories.
DETAILS:
Pwn2Own Automotive 2026 is an ongoing multi-day competition hosted by Zero Day Initiative (ZDI) targeting automotive systems, including in-vehicle infotainment (IVI), EV charging infrastructure, and related components. Day Two continued sessions produced additional successful exploitation attempts; specific targets, CVE assignments, and technical details from this continuation block are not confirmed in available source data — full results have not been extracted from the trigger payload. Day One of the competition saw 30 entries targeting automotive systems; Day Two maintained elevated activity with stakes described as continuing to rise, per ZDI reporting. A full three-day schedule was completed, with Day Three results and a Master of Pwn designation also reported — indicating the competition has concluded and all demonstrated vulnerabilities are now in ZDI’s coordinated disclosure pipeline. NOTE: The trigger payload appears to contain a partial or malformed data extract (onload="this.classList.add("loaded")"). Specific exploit details for this session cannot be confirmed from available information. IMPACT:
...
