🚀 Acunetix is now Invicti Web + API. Read the announcement.

Acunetix 360 On-Premises - v26.11.0

New features

  • Vulnerability data enrichment: Added enriched vulnerability data and known exploitation status, so you have more accurate information to prioritize the vulnerabilities detected in your scans. This supports the known exploited vulnerability (KEV) criterion in CISA BOD 26-04.
  • Internet-exposed targets: You can now specify whether a target is internet-exposed when you create or edit it, so you can easily identify publicly accessible assets. This supports the asset exposure criterion in CISA BOD 26-04.

Improvements

  • Scan profile header encryption: Improved data protection by encrypting scan profile header data, ensuring sensitive information is securely stored.
  • Website group size limit: Administrators can now set a maximum number of websites per group, helping you keep system performance optimal.
  • Global dashboard loading times: Improved dashboard performance by optimizing data retrieval and consolidating requests, so global metrics load significantly faster.
  • Scan report loading speed: Improved scan report loading by processing data in the background, reducing wait times and providing more frequent status updates.
  • Issue data loading: Improved issue data loading to deliver faster and more reliable access to your issues.
  • Browser file cleanup during agent upgrades: Added automatic cleanup of outdated browser files during agent upgrades, preventing false security scanner alerts and reducing manual post-upgrade maintenance.
  • Scan duration limit: Improved scan duration settings with a maximum time limit, so extended scans complete automatically instead of running indefinitely.
  • Issue retrieval performance: Improved issue data retrieval to prevent timeouts and deliver faster loading times when you navigate large sets of issues.
  • Scheduled scans list loading: Improved scheduled scan retrieval performance, so the scheduled scans list loads faster.

Resolved issues

  • Quotation marks in query parameters: Fixed an issue where query parameters containing quotation marks weren't properly encoded during scans, preventing request errors and ensuring scans complete successfully.
  • Cloning scan profiles with client certificates through the API: Fixed an issue where cloning scan profiles with global client certificates through the API failed with file validation errors, ensuring profiles clone successfully.
  • Preferred agent after switching between internal and cloud: Fixed an issue where preferred agent configurations weren't applied to targets after switching between internal and cloud environments, ensuring scans run reliably.

Security checks

  • Cryptography component updates: Added updated cryptography components to enhance application security and protect against known vulnerabilities.
  • Security component updates: Updated underlying components to include the latest security fixes, enhancing protection against known vulnerabilities.

Verify the hash value for package integrity in Acunetix 360 on-premises

  • The hash value for the 26.11.0.zip file is 413138B203AD7987E57808744EDED3014F2C141326A09440B923299E33964808.
You can verify the integrity of the file by checking its hash value using one of the outlined methods:
  • PowerShell (Windows): Get-FileHash -Path "26.11.0.zip" -Algorithm SHA256
  • Command Prompt (Windows): certutil -hashfile "26.11.0.zip" SHA256
  • Linux or macOS: sha256sum "26.11.0.zip"