Re-testing issues - Port Swigger

Summary: PortSwigger's Burp Suite DAST lets teams re-test individual issues to confirm a fix without waiting for a full scan, replaying the relevant requests and updating each issue's scanner status based on the outcome. When a later scan covers a location where an issue was previously found, the tool automatically re-tests it, and an issue is only marked Fixed (confirmed) with evidence when the scanner has positively re-tested it; issues that simply don't appear in a scan are not treated as resolved.
Why it matters: The tool's own rule is that an issue missing from a scan is not a fixed issue - so any remediation report built on absence of findings, rather than a positive re-test recorded in the issue's timeline, is claiming a fix the scanner never confirmed.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026