Back Securityaffairs.Co

Pwn2Own Berlin 2026, Day Two: $385,750 more, Microsoft Exchange falls, and the running total crosses $900K

Securityaffairs.Co •Pierluigi Paganini • May 15, 2026

Day two of Pwn2Own Berlin 2026 saw $385,750 earned for 15 zero-days, bringing the total to $908,750 and 39 vulnerabilities over two days. During the second day of Pwn2Own Berlin 2026, security researchers earned $385,750 after successfully demonstrating 15 unique zero-day vulnerabilities affecting products such as Windows 11, Microsoft Exchange, and Red Hat Enterprise Linux […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Pwn2Own Berlin 2026: Major Exploits Target Windows 11 and Microsoft Exchange During the Pwn2Own Berlin 2026 event, held from May 14 to 16, security researchers exploited numerous zero-day vulnerabilities, earning over $900,000 in cash prizes. On the first day, 24 unique vulnerabilities were discovered, including multiple exploits against Windows 11 and Microsoft Edge, totaling $523,000. On the second day, 15 additional vulnerabilities were exploited, including significant flaws in Microsoft Exchange, bringing the total to 39 vulnerabilities and $908,750 awarded. Notable achievements included Orange Tsai's complex exploit for Microsoft Exchange, earning him $200,000. The competition emphasizes ethical hacking and incentivizes the discovery of vulnerabilities in enterprise technologies and AI systems. Vendors have 90 days to patch the disclosed vulnerabilities. The event showcases the ongoing challenges in securing modern software and highlights the need for robust security measures. 19 sources 69

Pwn2Own Berlin 2026, Day Two: $385,750 more, Microsoft Exchange falls, and the running total crosses $900K

The full story

Extracted Entities

Attack Types (1)

Platforms (3)