Bitcoin Core disclosed three previously patched vulnerabilities on Nov. 10, 2026. The most serious could leave affected mining nodes unable to produce valid block templates after a blockchain reorganization until they were restarted. It required specific conditions, and about 9% of reachable nodes were still advertising vulnerable versions around the disclosure date.
A second flaw could repeatedly delay block downloads and, under particular network conditions, continue indefinitely. A third could weaken safeguards for nodes whose operators added a Tor daemon address to an optional trusted-peer setting; default configurations were unaffected, though Bitcoin Core said thousands of reachable nodes were potentially exposed. No exploitation was reported, and none of the flaws allowed bitcoin theft, unauthorized coin creation or consensus failure.
