Professional / Community 2025.6.4

Summary: PortSwigger released Burp Suite Professional/Community 2025.6.4 on 17 July 2025, adding custom actions that automate message modifications in Burp Repeater, a toggle for switching between single-row and multi-row tab views, and a built-in panel builder for adding settings to extensions without UI code. The release also updates the Montoya API to configure scan checks per-request and per-host, integrates the http object with Burp Scanner settings, and upgrades Burp's browser to Chromium 138.0.7204.100/.101.
Why it matters: The Montoya API change means requests issued from custom scan checks now inherit Burp Scanner's configured settings instead of defaulting to standard ones, which alters how existing custom checks behave during scans.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026