Professional / Community 2026.3

Summary: PortSwigger released Burp Suite Professional/Community 2026.3 on 12 March 2026, adding support for custom CA certificates, host-level SOCKS proxy bypass, and the option to hide decoded hover tooltips, along with bug fixes. The custom CA feature lets users add certificate authorities under Settings > Network > TLS > Custom CA certificates, removing manual workarounds for connecting through intercepting proxies or to services using certificates signed by an internal certificate authority.
What's compelling: Security teams testing internal services behind a corporate CA have relied on manual workarounds to get Burp through intercepting proxies; native custom CA support removes that friction from the testing workflow.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026