22 Oct 2026

Acunetix 360 On-Premises - v26.10.1

Improvements

Second-level domain discovery: Domain discovery now permanently identifies second-level domains in all environments.
Jira configuration alerts: Improved Jira configuration alerts with clearer messaging to ensure you're notified when your integration is incorrectly set up.
Jira integration credential security: Jira integration credentials are now automatically cleared from the cache after a set period instead of remaining there indefinitely.
Vulnerability list performance: Vulnerability lists now load faster and the application stays more stable, even when you work with large datasets.
Scan notifications for custom roles: You can now let custom roles send scan notifications to external recipients without giving them full access to all organizational notifications.
Scan report loading times: Scan reports with a high volume of vulnerabilities now load faster and respond more quickly.
Core component updates: Updated the application's core components to improve performance, security, and support for the latest web features.

Scan data uploads: Fixed an issue that caused errors when uploading scan data, ensuring that files are processed successfully without encountering timeouts.
Target imports with duplicate domains: Fixed an error that occurred when importing targets with duplicate domains or different protocols, ensuring discovery and restoration processes complete successfully.
Internal IP detection on the IP restriction page: Fixed an issue where internal IP addresses were incorrectly detected on the IP restriction page, ensuring you no longer receive false warning messages when configuring access settings.
Custom login scripts without an active persona: Fixed an issue where custom login scripts were omitted from scans when no active persona was configured, ensuring authentication scripts now execute correctly in script-only configurations.
Interactive Login configuration errors: Fixed an issue where Interactive Login configuration failures occurred without notification, adding error messages to inform you when settings can't be saved.
Scheduled group scan profiles: Fixed an issue where scheduled group scans used default profiles instead of assigned primary scan profiles, ensuring targets are scanned with their correct configurations.

Multi-factor authentication removal: Fixed the multi-factor authentication removal process to require a second-factor code, ensuring that only authorized users can disable this security feature.

Default protocol in website API responses: Added the default protocol parameter to website API responses, allowing you to view the default protocol for your websites.

The hash value for the 26.10.1.zip file is 7BE06E6E8947A902AA348576AF9486D92233B91BC72334E134DF56CC31774557.

You can verify the integrity of the file by checking its hash value using one of the outlined methods: