Professional / Community 2025.6

Summary: PortSwigger released Burp Suite Professional/Community 2025.6 on 12 June 2025, adding custom actions that automate message modification in Burp Repeater, a toggle for switching between single-row and multi-row tab views, and a built-in panel builder for adding settings to extensions without UI code. The release also updates the Montoya API to configure scan checks per-request and per-host, integrates the http object used by custom checks with Burp Scanner's settings, and upgrades Burp's browser to Chromium 137.
What's compelling: The API change means requests issued from custom scan checks now apply Burp Scanner's configured settings instead of defaulting to standard ones, which alters how existing extensions behave during scans.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026