Professional / Community 2025.9.4

Summary: PortSwigger released Burp Suite Professional and Community 2025.9.4 as an Early Adopter build on Wednesday, 1 October 2025 at 15:07 UTC. The release fixes an issue where scans failed with a critical error if a recorded login without a status check failed; scans now continue and log an event instead.
Bottom line: A recorded login without a status check could previously abort a scan with a critical error, so any team relying on that login configuration lost scan coverage until this fix.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026