openatomfoundation vulnerabilities

Products

• openatomfoundation/pikiwidb 1

Latest openatomfoundation CVEs

Newest publication first

1. CVE-2026-84700 Pika Unauthenticated Replication Access via Internal Protobuf Port

   Published 2026-09-02

   High·CVSS 8.8

   PikiwiDB (Pika) v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 (e.g. 11221 when the default client port 9221 is used) that does not authenticate incoming requests. Although requirepass is intended to gate replication — a sl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.