CRITICAL 9.2 NVD

CVE-2026-90481

In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate path or channel.

In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate path or channel.

References

Published: 2026-09-24 · Source: NVD · Feed updated: 2026-09-24
This critical severity vulnerability with a CVSS score of 9.2 was published on 2026-09-24 via NVD.

Risk Timeline

CVE Disclosed2026-09-24 · -1 days ago

Remediation Resources

Official Advisory
portswigger.net/burp/releases/dast-2026-8
vulnfeed aggregates 11976 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.