Tesla hacked, 37 zero-days demoed at Pwn2Own Automotive 2026
On the first day of the Pwn2Own Automotive 2026 competition, security researchers exploited 37 zero-days to hack the Tesla Infotainment System and earn $516,500.
After successfully chaining an information leak and an out-of-bounds write vulnerability to obtain root capabilities on the Tesla Infotainment System in the USB-based attack category, Synacktiv Team won $35,000. Additionally, they obtained root-level code execution on the Sony XAV-9500ES digital media receiver by chaining three vulnerabilities, which earned them an extra $20,000 in cash.
PetoWorks received $50,000 for chaining three zero-day bugs to obtain root privileges on a Phoenix Contact CHARX SEC-3150 charging controller, while Teams Fuzzware.io earned an additional $118,000 after hacking an Alpitronic HYC50 Charging ...