DAST 2026.10
Summary: PortSwigger released Burp Suite DAST 2026.10 on 8 October 2026, adding the ability to apply triage decisions to matching issues, so marking an issue as a false positive, accepted risk, or changing its severity updates matching issues on the site and creates an issue management rule for future scans. The release also adds issue retests to the GraphQL API, makes scans faster and less disk-intensive, and fixes a number of bugs.
Bottom line: Triage decisions now persist as rules that automatically handle matching issues in future scans, so a single false-positive or accepted-risk call can quietly suppress findings across every later scan of that site.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026