Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2026-90481

In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate path or channel.

Description

In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate path or channel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PortSwigger Burp Suite DAST

Default version status: unaffected

  • 2021.11 to < 2026.8affected

References