OAuth2 support has landed in the Authentication Helper, the Browser Extension has a new Script Viewer, ZAP can detect PHP2Shell, and we explain how we’re developing ZAP in the LLM age.
#zaproxy #appsec
OAuth2 support has landed in the Authentication Helper, the Browser Extension has a new Script Viewer, ZAP can detect PHP2Shell, and we explain how we’re developing ZAP in the LLM age.
#zaproxy #appsec
We do not believe that Java is affected by CVE-2026-111497 but we still recommend that you update this add-on from the ZAP Marketplace ASAP.
We have also regenerated the stable Docker image.
#zaproxy #appsec
PHP2Shell is the latest big “named” vulnerability. ZAP can now tell you if a site is running a vulnerable version of PHP, and it does so without sending a single extra request.
www.zaproxy.org/blog/2026-10...
#zaproxy #php2shell
PHP2Shell is the latest big “named” vulnerability. ZAP can now tell you if a site is running a vulnerable version of PHP, and it does so without sending a single extra request.
www.zaproxy.org/blog/2026-10...
#zaproxy #php2shell
www.zaproxy.org/blog/2026-10...
#zaproxy #appsec
www.zaproxy.org/blog/2026-10...
#zaproxy #appsec