Pwn2Own Berlin Day Two Features 15 Zero-Day Exploits
Summary
Competitors earned $385,750 by demonstrating 15 zero-days on day two of Pwn2Own Berlin 2026, including exploits affecting Microsoft Exchange, Windows 11, Red Hat Enterprise Linux, NVIDIA Container Toolkit, Cursor AI and OpenAI Codex.
Key points
- Participants earned $385,750 for demonstrating 15 unique zero-day exploits on day two.
- Orange Tsai of DEVCORE chained three bugs to achieve remote code execution with SYSTEM privileges on Microsoft Exchange, winning $200,000.
- Demonstrations included a Windows 11 integer overflow, a privilege escalation to root on Red Hat Enterprise Linux for Workstations, and a use-after-free exploit targeting NVIDIA Container Toolkit.
- Researchers demonstrated exploits against Cursor AI and OpenAI Codex, earning prizes in the AI category.
- Competition rules require entries to compromise fully patched targets and demonstrate arbitrary code execution; vendors have 90 days to patch after disclosure.
Article Details
- Event Type
- Pwn2Own Berlin 2026 competition demonstrations of zero-day exploits against enterprise and AI products.
- Impact
- On the second day, competitors demonstrated exploits involving 15 unique zero-day vulnerabilities and earned $385,750. Demonstrations included remote code execution with SYSTEM privileges on Microsoft Exchange, privilege escalation on Windows 11 and Red Hat Enterprise Linux for Workstations, and exploits against NVIDIA Container Toolkit, Cursor AI, and OpenAI Codex. Vendors have 90 days to patch vulnerabilities after disclosure at the event.
MITRE ATT&CK
People
0xDACAParticipated in a use-after-free exploit demonstration against NVIDIA Container Toolkit.Ben KooEscalated privileges to root on Red Hat Enterprise Linux for Workstations during the second day.Le Duc Anh VuDemonstrated an exploit against the Cursor AI coding agent.Noam TrobishiParticipated in a use-after-free exploit demonstration against NVIDIA Container Toolkit.Orange TsaiChained three bugs to demonstrate remote code execution with SYSTEM privileges on Microsoft Exchange; the article also identifies him as Orange Tsai.Sina KheirkhahDemonstrated a zero-day exploit against OpenAI Codex.Siyeon WiDemonstrated an integer-overflow exploit against Windows 11 during the second day.
Vendors
Microsoftearn $385,750 by exploiting 15 unique zero-day vulnerabilities across products such as Windows 11, Microsoft Exchange, Red Hat Enterprise Linux for Workstations, and the NVIDIA Container Toolkit.Nvidiaproducts such as Windows 11, Microsoft Exchange, Red Hat Enterprise Linux for Workstations, and the NVIDIA Container Toolkit.OpenAIThe event also featured notable AI-targeted exploits against Cursor AI and OpenAI Codex, with Orange Tsai, DEVCORE Research Team, and other researchers collecting major bounties.Red Hatby exploiting 15 unique zero-day vulnerabilities across products such as Windows 11, Microsoft Exchange, Red Hat Enterprise Linux for Workstations, and the NVIDIA Container Toolkit.
Products
Cursor AIThe event also featured notable AI-targeted exploits against Cursor AI and OpenAI Codex, with Orange Tsai, DEVCORE Research Team, and other researchers collecting major bounties.Microsoft Exchangeearn $385,750 by exploiting 15 unique zero-day vulnerabilities across products such as Windows 11, Microsoft Exchange, Red Hat Enterprise Linux for Workstations, and the NVIDIA Container Toolkit.Nvidia Container Toolkitsuch as Windows 11, Microsoft Exchange, Red Hat Enterprise Linux for Workstations, and the NVIDIA Container Toolkit.OpenAI CodexThe event also featured notable AI-targeted exploits against Cursor AI and OpenAI Codex, with Orange Tsai, DEVCORE Research Team, and other researchers collecting major bounties.Red Hat Enterprise Linux for Workstationsunique zero-day vulnerabilities across products such as Windows 11, Microsoft Exchange, Red Hat Enterprise Linux for Workstations, and the NVIDIA Container Toolkit.Windows 11saw competitors earn $385,750 by exploiting 15 unique zero-day vulnerabilities across products such as Windows 11, Microsoft Exchange, Red Hat Enterprise Linux for Workstations, and the NVIDIA Container Toolkit.