Pwn2Own Berlin 2026 Concludes: 47 Zero-Days, $1.3 Million Awarded

The Pwn2Own Berlin 2026 hacking conference wrapped up, yielding an astounding 47 new zero-day vulnerabilities and distributing $1.3 million in rewards, as reported by Cyber News - Erez Dasa. This significant event saw security researchers push enterprise systems to their limits, uncovering critical flaws across various platforms.

DEVCORE emerged as the ‘Master of Pwn,’ demonstrating a dominant performance with 50.5 points and taking home $505,000. Other notable participants included STARLabs SG, securing second place with 25 points and $242,500, and Out Of Bounds in third. The vulnerabilities discovered ranged from integer overflows in Windows 11 leading to privilege escalation, to exploits against Red Hat Linux and even OpenAI Codex.

For defenders, this haul of 47 zero-days represents a critical, immediate threat landscape shift. While vendors will now work to patch these, the period before widespread deployment leaves organizations exposed. The attacker’s calculus is clear: these newly revealed flaws will be rapidly weaponized by sophisticated groups. CISOs must be thinking about their patch management velocity and the efficacy of their detection capabilities against novel attack vectors.