logo

Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026

ID: f4c46328-4164-596a-9751-aaf3adad089d

STIX ID: report--f4c46328-4164-596a-9751-aaf3adad089d

Feed Name: Bleeping Computer

Threat Score
10/100

Date Published: 2026-05-18

Date Updated: 2026-05-18

Author: Sergiu Gatlan

...
...

Pwn2Own Berlin 2026 concluded at OffensiveCon with researchers earning $1,298,250 for demonstrating 47 zero-day exploits across browsers, enterprise software, virtualization, container/cloud environments, and AI/LLM tooling; DEVCORE won the event after chaining multiple bugs to achieve remote SYSTEM execution on Microsoft Exchange. The report is a summary of the contest results, prize distribution, notable exploit chains, and notes the 90-day vendor patching window before ZDI disclosure.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.