Kali Linux 2026.3 Releases With Six New Security Tools and Linux Kernel 7.1.5
Kali Linux 2026.3 has officially arrived as the third Kali update of 2026, bringing Linux kernel 7.1.5, KDE Plasma 6.7, and six new penetration testing utilities. Released on October 26, the latest version transitions the core operating system from kernel 6.19 to 7.1.5-1kali1, delivering 126 package updates alongside major mobile platform adjustments.
The update arrives following June’s 2026.2 release, which introduced nine tools and modified the distribution’s APT source format.
Six New Penetration Testing Tools Added to Repositories
The 2026.3 update expands the platform’s security arsenal with six specialized utilities covering web discovery, port scanning, and file-share review. The newly integrated packages include:
* dalfox: An automated XSS scanner.
* katana: A crawler.
* qsreplace: A utility for swapping query string values in URLs.
* rustscan: A port scanner.
* sdrangel: A front end for software-defined radio.
* snaffler-ng: A tool that scans SMB shares for credentials and sensitive data.
These additions should only be used on systems that the tester owns or has clear permission to assess.
🐉⚡ KALI LINUX 2026.3 — THE NEXT EVOLUTION IS HERE!The cybersecurity toolkit keeps evolving! 💻🔥 Discover what's new in Kali Linux 2026.3, from refreshed tools and updated packages to desktop improvements, NetHunter enhancements, and new capabilities for security… pic.twitter.com/zDXDrNBBJT
Public Build Scripts Move to Containerized Environments
The Kali Linux team overhauled the public build scripts used to generate every official image. Every refreshed script now includes a `build-in-container.sh` utility. This script automatically detects whether Docker or Podman is present, creates an isolated build container, and executes the image creation process inside it.
This containerized approach keeps build dependencies off the host system. Developers building custom ISOs on Debian-based systems can clone the repository, install six core packages—`simple-cdd`, `debian-cd`, `cpio`, `mtools`, `dosfstools`, and `xorriso`—and execute the build command.
TicWatch Pro 3 Gains Wardriving and Smartwatch Support
Kali NetHunter, the project’s Android and wearable security testing platform, receives significant updates focused on hardware compatibility. Qazy Anwar updated the `libnexmonkali` library to enable internal monitor mode on the TicWatch Pro 3 smartwatch.
This update allows users to perform wardriving directly from the wearable device using chroot tools such as the `aircrack-ng` suite and `Kismet`. Additionally, NFC access to the NetHunter chroot enables users to read, clone, and edit Mifare classic cards without external hardware adapters, alongside experimental support for WearHunter and KernelSU.
Frequently Asked Questions
What is the exact kernel version in Kali Linux 2026.3?
The operating system utilizes Linux kernel version 7.1.5-1kali1 on the rolling branch, upgrading from the previous 6.19 version.
What desktop environment updates are included in this release?
The update includes KDE Plasma 6.7, which introduces per-screen virtual desktops and the ability to duplicate network connections.
Which smartwatch models now support mobile security testing?
The TicWatch Pro 3 series now supports wardriving via updated NetHunter libraries.