SHA256: {SHA FROM OPTION GOES HERE} MD5: {MD5 FROM OPTION GOES HERE}

This release updates the bundled Java runtime to Java 26. It also includes improvements to Burp Scanner and a range of bug fixes.

We've fixed the following bugs:

• An issue where generated per-host certificates had lifetimes exceeding current browser requirements. Certificate lifetimes are now limited to 199 days.
• An issue where the Render tab would sometimes fail to render responses.
• An issue where Decoder didn't preserve CRLF line endings when pasting content with Ctrl+V.
• An issue where Intruder attack numbers skipped every other number instead of incrementing sequentially.
• An issue where Collaborator settings didn't respect the user/project configuration scope.
• An issue where closing a Bambda or Custom Action editor with unsaved changes would silently discard them. Burp now prompts before discarding.
• An issue where hotkeys imported via the Settings > User interface > Hotkeys settings cog weren't saved correctly.
• An issue where scope rules generated from URLs didn't correctly escape regular-expression metacharacters.
• An issue where long words didn't soft-wrap in the Markdown notes editor.

We've made the following improvements and bug fixes to Burp Scanner:

• The Cross-Domain Referer Leakage check now honours per-element referrerpolicy attributes, reducing false positives.
• Configured custom headers are now applied when probing common endpoints.
• URLs that differ only in cache-busting or session-token parameters are now de-duplicated, reducing noise and memory use during scans.
• We've resolved several memory and resource leaks across crawl and audit, significantly improving stability for large scans.
• We've fixed an issue in DOM Invader where sinks could disappear.
• We've improved the scanner's ability to replay recorded logins that have many requests.

We've updated Burp's Java version to Java 26 (26.0.1).

We've upgraded Burp's browser to Chromium 149.0.7827.103 for Windows & Mac and 149.0.7827.102 for Linux. For more information, see the Chromium release notes.