logo

Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own

ID: cfcd9bd7-93c9-52e6-94c8-445a888bf1c5

STIX ID: report--cfcd9bd7-93c9-52e6-94c8-445a888bf1c5

Feed Name: Bleeping Computer

Threat Score
30/100

Date Published: 2026-05-15

Date Updated: 2026-05-15

Author: Sergiu Gatlan

...
...

**Executive Summary:** During day two of Pwn2Own Berlin 2026, competitors earned $385,750 by demonstrating 15 unique zero-day exploits against enterprise software and AI agents, including a chained remote code execution to SYSTEM on Microsoft Exchange and a local root escalation on Red Hat Enterprise Linux; vendors are given 90 days to patch following disclosure.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.