Professional / Community 2026.4

Summary: PortSwigger released Burp Suite Professional and Community Edition 2026.4 on 23 April 2026, introducing a combined installer for both editions and removing the Java binary as a hardening measure. The release also lets extensions stop requests from being sent or handle them entirely within Burp by returning custom responses, and adds Markdown formatting in Notes plus collection-level notes in Organizer.
Why it matters: Extensions gaining the ability to block requests or answer them inside Burp means the tooling sitting in front of your web traffic can now shape what your testers see, not just modify it in transit. The removal of the Java binary is a hardening step, but PortSwigger flags that it may break existing workflows, so teams should confirm their setup before upgrading.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026