Kali Linux 2026.3 arrived on October 26, 2026, bringing 126 package updates, Linux kernel 7.1.5, KDE Plasma 6.7, six new security tools, and containerized image builds via Docker and Podman.
The Kali team intended to refresh every build script for this release, but the project missed that target and deferred the remaining work to version 2026.4. This third release of 2026 instead focuses on removing the friction of assembling custom environments for penetration testers and security auditing teams. The Debian-based distribution, used by red teams and network researchers as an installed system or live environment, now standardizes public build scripts across platforms and adds a containerized wrapper to change how administrators compile specialized distributions.
Containers Break Image Build Loops
Compiling custom Kali installation images previously required an existing Kali host, which created a distribution loop. The 2026.3 update ends that dependency with build-in-container.sh, a helper script that detects Docker or Podman, spins up a dedicated container, and executes the build inside it. These are the same build scripts used to generate every official Kali image available from the project website.
Kali Linux 2026.3 Release (Build-Scripts Refresh): We are back with Kali Linux 2026.3, the third release of the year! We have been busy making it easier to build Kali, updating the desktop experience, and bringing in more tools… www.kali.org/blog/kali-linux-2026-3-release/ pic.twitter.com/3gAJGA1YCZ
Builders can now clone the kali-installer repository, install dependencies like simple-cdd and xorriso, and generate rolling ISO images for AMD64 or ARM64 architectures using straightforward terminal flags. The refreshed scripts share uniform command-line arguments, directory structures, and behaviors across supported environments. While default settings produce a kali-rolling ISO for AMD64, operators can use flags to change the hostname, add packages, or switch branches, variants, and architectures.
The transition disrupted some legacy automation pipelines.
sorry for any CI pipelines or workflows we have broken.
Kali Team, Kali Linux developers
New Tools Join Kernel 7.1.5
The rolling distribution moves its main Linux kernel from version 6.19 to 7.1.5. The official package tracker confirms the exact release kernel as version 7.1.5-1kali1 for the rolling branch, accompanied by 126 package updates. Network repositories now host six newly added utilities for web application assessment, reconnaissance, and credential discovery:
- dalfox: An open-source automated XSS scanner and utility.
- katana: A next-generation crawling and spidering framework for discovering endpoints.
- qsreplace: A command-line utility that accepts URLs on standard input and swaps query string values.
- rustscan: A modern port scanner written in Rust.
- sdrangel: A Qt-based front-end supporting hardware including RTL-SDR, BladeRF, and HackRF.
- snaffler-ng: A tool that searches readable Windows SMB shares for credentials and sensitive data.
Plasma 6.7 Isolates Virtual Desktops
KDE Plasma 6.7 introduces per-screen virtual desktops, allowing multi-monitor users to keep terminals, browsers, documentation, or assessment tools isolated on individual displays. Users no longer have to shift the active workspace across every connected monitor simultaneously.
Kali Linux 2026.3 is out! 6 new tools (dalfox, katana, rustscan, snaffler-ng & more), kernel 7.1.5, KDE Plasma 6.7, and 126 package updates.Ready for your next pentest.#KaliLinux #Cybersecurity #Pentesting #EthicalHacking pic.twitter.com/JkvW7cdCAP
Plasma 6.7 also lets users duplicate existing network connections and incorporates refreshed application icons to make security tools easier to distinguish in system menus. The update brings improved Wayland integration, faster navigation through the Overview interface, and reduced power consumption on integrated Intel graphics. Xfce remains the default desktop environment for the distribution.
NetHunter Adds Wearable and Mobile Support
Kali NetHunter now resolves compatibility friction between modern systemd and udev components and older Android kernels. Nine new device kernels join the lineup, covering hardware from Google Pixel models running LineageOS to the Sony Xperia 10 V.
New features include NFC Arsenal, which grants the Kali chroot direct access to read, clone, and edit Mifare Classic cards without external hardware adapters, and WearHunter. This experimental tool enables users to control a NetHunter watch from a phone over Bluetooth or Wi-Fi via ADB.
Remaining script updates are deferred to version 2026.4.
Kali Linux 2026.3 arrives with KDE Plasma 6.7, Linux kernel 7.1.5, six new security tools, and major NetHunter improvements.https://t.co/oJHd0eQ7o6#Linux #OpenSource