Critical · 9.2 CVE-2026-90481 EUVD-2026-86005GHSA-hmv3-x9c8-w9rm

In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate …

Published Sep 24, 2026 · Updated Sep 24, 2026 · Assigned by mitre

Vendor: PortSwigger Product: Burp Suite DAST

Description

In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate path or channel.

Affected products

Vendor	Product	Affected	Fixed
PortSwigger	Burp Suite DAST	2021.11 – < 2026.8	2026.8

References

https://portswigger.net/burp/releases/dast-2026-8 release-notes