🚀 Acunetix is now Invicti Web + API. Read the announcement.

Acunetix 360 On-Demand - v26.10.0

New features

  • Clone scan profiles to different targets: Added the ability to clone scan profiles to different targets, allowing you to reuse configurations across multiple websites without manual setup.

Resolved issues

  • HAR file generation and login verification results: Fixed an issue where enabling HAR file generation prevented login and logout verification results from displaying, ensuring the interface loads correctly and files are available for download.
  • PDF reports with an absolute scan data path: Fixed an issue where PDF reports were exported as empty files when using an absolute physical path for the scan data directory.
  • SSRF responder registration: Fixed an issue that prevented the SSRF responder from registering, ensuring that security scans can successfully test for SSRF vulnerabilities.
  • Script actions in Business Logic Recordings: Fixed an issue where script actions in Business Logic Recordings failed to execute, ensuring custom scripts and dynamic values are correctly applied during scan execution.
  • Scan profile name updates through the API: Fixed an issue where updating a scan profile name via the API failed with validation errors for unrelated fields, allowing for successful profile updates.
  • New Secret button tooltip: Fixed the tooltip on the New Secret button to correctly display "SEM integration", providing accurate information about secret retrieval.

Security checks

  • Invitation codes in the member list: Fixed a security vulnerability by hiding invitation codes in the member list, preventing unauthorized users from hijacking invitations or gaining elevated account access.

API changes

  • User Scope in the notification creation API: Fixed the notification creation API to include the User Scope parameter, allowing you to programmatically set notifications to Self or Any User, consistent with the web interface.