CVE-2025-40760: Siemens Altair Grid Engine

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests. This could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks.

Affected products

• Siemens Altair Grid Engine: before V2026.0.0 (fixed in V2026.0.0)

Published 2025-11-11. Last modified 2026-06-17.