CVE-2016-10725

In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts) because operations occur in the wrong order. This behavior occurs in the remote network alert system (deprecated since Q1 2016). This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins.

• CWE-310

• https://bitcoin.org/en/posts/alert-key-and-vulnerabilities-disclosure
• https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_ExposuresVendor Advisory
• https://github.com/JinBean/CVE-Extension
• https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-July/016189.htmlThird Party Advisory
• https://bitcoin.org/en/posts/alert-key-and-vulnerabilities-disclosure
• https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_ExposuresVendor Advisory
• https://github.com/JinBean/CVE-Extension
• https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-July/016189.htmlThird Party Advisory

Published

Jul 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10719TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerabilit…
• CVE-2016-1072Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat…
• CVE-2016-10721partclone.restore in Partclone 0.2.87 is prone to a heap-bas…
• CVE-2016-10722partclone.fat in Partclone before 0.2.88 is prone to a heap-…9.8
• CVE-2016-10723An issue was discovered in the Linux kernel through 4.17.2. …
• CVE-2016-10724Bitcoin Core before v0.13.0 allows denial of service (memory…
• CVE-2016-10726The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and …
• CVE-2016-10727camel/providers/imapx/camel-imapx-server.c in the IMAPx comp…
• CVE-2016-10728An issue was discovered in Suricata before 3.1.2. If an ICMP…
• CVE-2016-10729An issue was discovered in Amanda 3.3.1. A user with backup …
• CVE-2016-1073Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat…
• CVE-2016-10730An issue was discovered in Amanda 3.3.1. A user with backup …