CVE-2026-90481

CVSS 9.2 (critical) · published 2026-09-24

In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate path or channel.

Weakness: CWE-288

Source: NVD CVE-2026-90481

References

• https://portswigger.net/burp/releases/dast-2026-8

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.