DAST 2026.10.2
Summary: PortSwigger released Burp Suite DAST 2026.10.2 on 27 October 2026, adding ServiceNow ticketing that raises, links, and automates tickets from issues based on severity, confidence, and site. The release also expands SOAP API scan coverage to nested values, inherited fields, XML attributes, SOAP headers, and operations using XML Schema types such as 64-bit integers, URIs, and durations.
Bottom line: The scanner now builds requests in the format a SOAP service expects so payloads reach the application, which means the WSDL-defined operations and inputs your teams left untested are now in scope.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026