CVE-2025-40760 — Siemens / Altair Grid Engine

CVE-2025-40760

Siemens / Altair Grid Engine PUBLISHED

Description (CNA)

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests. This could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks.

Affected (CNA)

Vendor / product	Versions
Siemens / Altair Grid Engine	affected 0 before V2026.0.0

CWE

CWE-209

References

https://cert-portal.siemens.com/productcert/html/ssa-514895.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.