Professional / Community 2025.9.2

Summary: PortSwigger released Burp Suite Professional/Community 2025.9.2 on 22 September 2025, fixing several custom scan check bugs and upgrading Burp's embedded browser to Chromium 140.0.7339.186 on Windows and Mac and 140.0.7339.185 on Linux. The fixes cover custom scan checks with default content incorrectly showing as modified, new custom scan checks not enabled by default when added while the scan launcher is open, an unwanted save dialog on double-clicking the Create using this template button, and Bambda library filter text preventing the split pane from resizing.
What's compelling: Custom scan checks that silently show as modified or fail to enable by default can leave a team believing a scan covered a check it never ran, so anyone relying on custom checks should confirm their configuration after this update.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026