Back Thezdi

Pwn2Own Berlin 2026: Day Three Results and Master of Pwn

Thezdi •Dustin Childs • May 16, 2026

Welcome to the third and final day of Pwn2Own Berlin 2026! Over the past two days, some amazing research has been put on display, and today looks just as intense. So far, we have awarded $908,750 for 39 unique zero days. With SharePoint and ESXi as targets today, the chances are excellent for crossing the million-dollar threshold. Here are the Master of Pwn standings as we begin the day:

Let's get to the results of Day Three: SUCCESS / COLLISION - Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam) used two bugs to exploit Red Hat Linux, but one of the bugs was previously known. He still earns $7,000 and 1.5 Master of Pwn points.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Pwn2Own Berlin 2026: DEVCORE Wins with 47 Zero-Days and $1.29M in Payouts Pwn2Own Berlin 2026 concluded with DEVCORE being crowned Master of Pwn after discovering 47 unique zero-days, leading to total payouts of $1,298,250. The competition showcased significant vulnerabilities, including exploits targeting SharePoint and ESXi. Participants demonstrated various attack vectors, with DEVCORE dominating across categories. The event highlighted the ongoing threat landscape, as researchers exploited critical systems, including Red Hat Linux. The total amount awarded during the event reached $1,298,250, surpassing the million-dollar threshold. The event took place over three days, culminating on May 16, 2026, at OffensiveCon. The findings from Pwn2Own are crucial for organizations to enhance their security postures against emerging threats. 2 sources 65

Pwn2Own Berlin 2026: Day Three Results and Master of Pwn

The full story

Extracted Entities

Attack Types (1)

Platforms (3)