Description
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests.
This could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Altair Grid Engine | < V2026.0.0 | V2026.0.0 |
Advisories 3
- NCSC-2025-0357 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 11, 2025
- ICSA-25-317-16 Siemens Altair Grid Engine CISA ICS & IT advisories · Nov 11, 2025
- SSA-514895 SSA-514895: Multiple Vulnerabilities in Altair Grid Engine V2025.1.0 Siemens ProductCERT · Nov 11, 2025