Pwn2Own Berlin 2026 ended with researchers earning $1,298,250 for exploiting 47 zero-day flaws across enterprise software, browsers, AI systems, and virtualization technologies. DEVCORE topped the leaderboard, with standout wins against Microsoft Exchange, Microsoft Edge, Windows 11, Red Hat Enterprise Linux for Workstations, NVIDIA Container Toolkit, and VMware ESXi. #Pwn2OwnBerlin2026 #DEVCORE #MicrosoftExchange #MicrosoftEdge #Windows11 #RedHatEnterpriseLinux #VMwareESXi #NVIDIAContainerToolkit
Keypoints
- Researchers collected $1,298,250 for 47 zero-day exploits at Pwn2Own Berlin 2026.
- The contest focused on enterprise technologies, AI, browsers, servers, and virtualization platforms.
- DEVCORE won the event with 50.5 Master of Pwn points and $505,000 in rewards.
- Orange Tsai earned the top single payout of $200,000 for a Microsoft Exchange exploit chain.
- Vendors have 90 days to patch the flaws before ZDI publicly discloses them.