Professional / Community 2025.10.3

Summary: PortSwigger released Burp Suite Professional and Community 2025.10.3 on Thursday, 6 November 2025, fixing an issue that prevented some Kotlin-based extensions, such as MCP Server, from loading correctly in version 2025.10.2. The release is available as downloads for Windows, macOS and Linux, plus a JAR, and is subject to the licence agreement.
Bottom line: Teams that moved to 2025.10.2 with Kotlin-based extensions like MCP Server were running a toolkit where those extensions would not load, so any testing done on that version may have gone forward without them.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026