Vulnerability · Published Nov 11, 2025 · Assigned by siemens
CVE-2025-40760
Medium 5.5
In plain English
A medium-severity security flaw in Altair Grid Engine from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Official description
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests. This could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Altair Grid Engine | 0 – before V2026.0.0 |
Weakness: CWE-209 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N