DAST 2026.11.1
Summary: PortSwigger released Burp Suite DAST 2026.11.1 on 12 November 2026, adding a beta GraphQL API endpoint at /graphql/beta while restricting /graphql/v1 to the public schema, so requests using undocumented or Beta fields now fail there with a validation error. The release also stops storing re-test data for Low and Information issues, removes previously stored re-test data in the background after upgrade, and disables the Re-test issue button for those severities.
Bottom line: After upgrading, teams can re-test only issues whose current severity is Medium or High, so any workflow that relied on re-testing Low and Information findings will find the button disabled and the stored re-test data gone.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026