Vulnerability data enrichment: Added enriched vulnerability data and known exploitation status, so you have more accurate information to prioritize the vulnerabilities detected in your scans. This supports the known exploited vulnerability (KEV) criterion in CISA BOD 26-04.
Internet-exposed targets: You can now specify whether a target is internet-exposed when you create or edit it, so you can easily identify publicly accessible assets. This supports the asset exposure criterion in CISA BOD 26-04.
Improvements
Scan profile header encryption: Improved data protection by encrypting scan profile header data, ensuring sensitive information is securely stored.
Website group size limit: Administrators can now set a maximum number of websites per group, helping you keep system performance optimal.
Global dashboard loading times: Improved dashboard performance by optimizing data retrieval and consolidating requests, so global metrics load significantly faster.
Scan report loading speed: Improved scan report loading by processing data in the background, reducing wait times and providing more frequent status updates.
Issue data loading: Improved issue data loading to deliver faster and more reliable access to your issues.
Browser file cleanup during agent upgrades: Added automatic cleanup of outdated browser files during agent upgrades, preventing false security scanner alerts and reducing manual post-upgrade maintenance.
Scan duration limit: Improved scan duration settings with a maximum time limit, so extended scans complete automatically instead of running indefinitely.
Issue retrieval performance: Improved issue data retrieval to prevent timeouts and deliver faster loading times when you navigate large sets of issues.
Scheduled scans list loading: Improved scheduled scan retrieval performance, so the scheduled scans list loads faster.
HSTS preload directive report template: Added a separate report template for a missing HSTS preload directive, with its own Best Practice severity. The report for HSTS errors and warnings no longer includes preload recommendations, so you can fix header errors without being prompted to add the preload directive.
Resolved issues
Quotation marks in query parameters: Fixed an issue where query parameters containing quotation marks weren't properly encoded during scans, preventing request errors and ensuring scans complete successfully.
Cloning scan profiles with client certificates through the API: Fixed an issue where cloning scan profiles with global client certificates through the API failed with file validation errors, ensuring profiles clone successfully.
Preferred agent after switching between internal and cloud: Fixed an issue where preferred agent configurations weren't applied to targets after switching between internal and cloud environments, ensuring scans run reliably.
Security checks
Cryptography component updates: Added updated cryptography components to enhance application security and protect against known vulnerabilities.
Security component updates: Updated underlying components to include the latest security fixes, enhancing protection against known vulnerabilities.
PHP multipart memory corruption (Php2Shell) and Node.js Brotli Decoder memory corruption (Node2Shell): Added active security checks for the PHP multipart out-of-memory remote code execution vulnerability (CVE-2026-109618 and CVE-2026-109619) and the Node.js Brotli Decoder vulnerability (CVE-2026-111497), allowing you to confirm affected targets during scans.