Will Dormann

Pwn2Own Berlin 2026 is rejecting working RCEs because organizers ran out of contest slots.

Visit a website in Firefox and get code execution? Rejected.

Strange days indeed.

May 11 at 4:50pmWeb
Show threadVissMay 11
@wdormann i wanna know what models and harnesses theyre using
Show threadEckes May 11
@wdormann revenge disclosure is not even the worst outcome, selling to Brokers would be. (But why would it be revenge anyway it’s Not Like that’s the only cvd channel to browser vendors?)
Show threadROTOPE~1 ⭐️May 11
@wdormann if you can't get Remote Kinetic Execution, don't even other submitting.
Show threadJacquelineMay 11
@wdormann AI generated vulns are at an all time high