U
Vendor security profile
uptrain
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
4toplam CVE
Uncertain4 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
7.4
CVE-2025-27772Uptrain vulnerable to remote code execution via `/new_run` endpoint
Patch status unknownEPSS %1
7.4
7.4
CVE-2025-27770UpTrain vulnerable to Remote code execution at `/create_project`
Patch status unknownEPSS %1
7.7
CVE-2025-27621UpTrain has a Constant Default API Key
Patch status unknownEPSS %0