🚀 Acunetix is now Invicti Web + API. Read the announcement.

Acunetix 360 On-Premises - v26.10.0

New features

  • Clone scan profiles to different targets: Added the ability to clone scan profiles to different targets, allowing you to reuse configurations across multiple websites without manual setup.

Resolved issues

  • HAR file generation and login verification results: Fixed an issue where enabling HAR file generation prevented login and logout verification results from displaying, ensuring the interface loads correctly and files are available for download.
  • PDF reports with an absolute scan data path: Fixed an issue where PDF reports were exported as empty files when using an absolute physical path for the scan data directory.
  • SSRF responder registration: Fixed an issue that prevented the SSRF responder from registering, ensuring that security scans can successfully test for SSRF vulnerabilities.
  • Script actions in Business Logic Recordings: Fixed an issue where script actions in Business Logic Recordings failed to execute, ensuring custom scripts and dynamic values are correctly applied during scan execution.
  • Scan profile name updates through the API: Fixed an issue where updating a scan profile name via the API failed with validation errors for unrelated fields, allowing for successful profile updates.
  • New Secret button tooltip: Fixed the tooltip on the New Secret button to correctly display "SEM integration", providing accurate information about secret retrieval.

Security checks

  • Invitation codes in the member list: Fixed a security vulnerability by hiding invitation codes in the member list, preventing unauthorized users from hijacking invitations or gaining elevated account access.

API changes

  • User Scope in the notification creation API: Fixed the notification creation API to include the User Scope parameter, allowing you to programmatically set notifications to Self or Any User, consistent with the web interface.

Verify the hash value for package integrity

The hash value for the 26.10.0.zip file is 09CFF2BDD856F48247EC3722105E45741E01BAC875359E3043A00DCC03B7F6F2. You can verify the integrity of the file by checking its hash value using one of the outlined methods:
  • PowerShell (Windows): Get-FileHash -Path "26.10.0.zip" -Algorithm SHA256
  • Command Prompt (Windows): certutil -hashfile "26.10.0.zip" SHA256
  • Linux or macOS: sha256sum "26.10.0.zip"