Zero-Day Market

Acquisition prices from exploit brokers — verified snapshots.

Crowdfense opzero.ru https://opzero.ru/en/prices/ — Nov. 20, 2022 / Dec. 17, 2023 / Sept. 1, 2024 / Nov. 5, 2025 / March 24, 2026

Mobile

Target Type Nov. 20, 2022 Dec. 17, 2023 Sept. 1, 2024 Nov. 5, 2025 March 24, 2026 Δ
Android Full Chain Zero Click Full Chain $2,500,000 $2,500,000 $2,500,000 $2,500,000 $2,500,000 –
Signal RCE RCE $1,500,000 $1,500,000 $1,500,000 $1,500,000 $1,500,000 –
Telegram RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
WeChat RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
WhatsApp RCE RCE $1,000,000 $1,000,000 $1,000,000 $1,000,000 $1,000,000 –
WhatsApp RCE Zero Click RCE $1,500,000 $1,500,000 $1,500,000 $1,500,000 $1,500,000 –
Wire RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
iMessage RCE RCE $1,000,000 $1,000,000 $1,000,000 $1,000,000 $1,000,000 –
iMessage RCE Zero Click RCE $1,500,000 $1,500,000 $1,500,000 $1,500,000 $1,500,000 –
iOS Full Chain Zero Click Full Chain $2,000,000 $2,000,000 $2,000,000 $2,000,000 $2,000,000 –

Desktop

Target Type Nov. 20, 2022 Dec. 17, 2023 Sept. 1, 2024 Nov. 5, 2025 March 24, 2026 Δ
Adobe Reader RCE+SBX RCE+SBX $100,000 $100,000 $100,000 $100,000 $100,000 –
Chrome RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
Firefox RCE RCE $200,000 $200,000 $200,000 $200,000 $200,000 –
Linux LPE LPE $100,000 $100,000 $100,000 $100,000 $100,000 –
MS Edge RCE RCE $400,000 $400,000 $400,000 $400,000 $400,000 –
MS Outlook RCE RCE $250,000 $250,000 $250,000 $250,000 $250,000 –
Thunderbird RCE RCE $200,000 $200,000 $200,000 $200,000 $200,000 –
WinRAR RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
Windows LPE LPE $150,000 $150,000 $150,000 $150,000 $150,000 –

Servers

Target Type Nov. 20, 2022 Dec. 17, 2023 Sept. 1, 2024 Nov. 5, 2025 March 24, 2026 Δ
Apache RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
Dovecot RCE RCE $200,000 $200,000 $200,000 $200,000 $200,000 –
MS IIS RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
OpenSSL RCE RCE $250,000 $250,000 $250,000 $250,000 $250,000 –
PHP RCE RCE $250,000 $250,000 $250,000 $250,000 $250,000 –
Postfix RCE RCE $200,000 $200,000 $200,000 $200,000 $200,000 –
WordPress RCE RCE $150,000 $150,000 $150,000 $150,000 $150,000 –
nginx RCE RCE $300,000 $300,000 $300,000 $300,000 $300,000 –

Routers

Target Type Nov. 20, 2022 Dec. 17, 2023 Sept. 1, 2024 Nov. 5, 2025 March 24, 2026 Δ
Cisco RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
Citrix RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
Dlink RCE RCE $50,000 $50,000 $50,000 $50,000 $50,000 –
FortiNet RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
Huawei RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
Mikrotik RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
NETGEAR RCE RCE $50,000 $50,000 $50,000 $50,000 $50,000 –
Sonicwall RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
Sophos RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
TP-link RCE RCE $50,000 $50,000 $50,000 $50,000 $50,000 –
Ubiquiti RCE RCE $50,000 $50,000 $50,000 $50,000 $50,000 –

Virtualisation

Target Type Nov. 20, 2022 Dec. 17, 2023 Sept. 1, 2024 Nov. 5, 2025 March 24, 2026 Δ
Microsoft Hyper-V VM Escape VME $1,000,000 $1,000,000 $1,000,000 $1,000,000 $1,000,000 –
Parallels Desktop VM Escape VME $300,000 $300,000 $300,000 $300,000 $300,000 –
VMware ESXi RCE RCE $1,000,000 $1,000,000 $1,000,000 $1,000,000 $1,000,000 –
VMware ESXi VM Escape VME $500,000 $500,000 $500,000 $500,000 $500,000 –
VMware Workstation VM Escape VME $300,000 $300,000 $300,000 $300,000 $300,000 –

Baseband

Target Type Nov. 20, 2022 Dec. 17, 2023 Sept. 1, 2024 Nov. 5, 2025 March 24, 2026 Δ
Intel RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
MediaTek RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
Qualcomm RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
Samsung LSI RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –
Unisoc RCE RCE $500,000 $500,000 $500,000 $500,000 $500,000 –

Web Services

Target Type Nov. 20, 2022 Dec. 17, 2023 Sept. 1, 2024 Nov. 5, 2025 March 24, 2026 Δ
Ajenti RCE RCE $50,000 $50,000 $50,000 $50,000 $50,000 –
CentOS Web Panel RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
IPB RCE RCE $50,000 $50,000 $50,000 $50,000 $50,000 –
ISPConfig RCE RCE $50,000 $50,000 $50,000 $50,000 $50,000 –
PHPbb RCE RCE $50,000 $50,000 $50,000 $50,000 $50,000 –
Webmin RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
cPanel RCE RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
vBulletin RCE RCE $50,000 $50,000 $50,000 $50,000 $50,000 –

Others

Target Type Nov. 20, 2022 Dec. 17, 2023 Sept. 1, 2024 Nov. 5, 2025 March 24, 2026 Δ
Antiviruses RCE $50,000 $50,000 $50,000 $50,000 $50,000 –
Firewalls RCE $100,000 $100,000 $100,000 $100,000 $100,000 –
Electric Vehicle Charging Stations Individual — — On request On request On request –

Source: https://opzero.ru/en/prices/ — data verified via Wayback Machine snapshots.