Professional / Community 2026.10

Summary: PortSwigger released Burp Suite Professional / Community 2026.10 on Monday, 12 October 2026 at 12:01 UTC, reintroducing support for HTTP Digest authentication so testers can assess applications using that method without an older Burp version or a workaround. The release also keeps notifications attached to Burp's main windows rather than over dialogs, moves notifications to another window when one closes, tightens BApp restrictions, fixes several bugs, and upgrades Burp's browser to Chromium 154.0.8037.98 on Windows and macOS and 154.0.8037.97 on Linux.
What's compelling: Teams that had been testing Digest-protected applications on an older Burp build or a workaround now have a supported path, and the bundled Chromium 154 upgrade changes the browser your testers are running against targets.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026