Siemens Altair Grid Engine
Altair Grid Engine contain multiple vulnerabilities that could allow an attacker to escalate privileges and execute arbitrary code with superuser permissions. Siemens has released a new version for Altair Grid Engine and recommends to update to the latest version.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40763US | — | — | ||
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries… | ||||
| CVE-2025-40760US | — | — | ||
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash… | ||||
references
External citations — patches, advisories, analysis.
- SSA-514895: Multiple Vulnerabilities in Altair Grid Engine V2025.1.0 - CSAF Versionself
- SSA-514895: Multiple Vulnerabilities in Altair Grid Engine V2025.1.0 - HTML Versionself
- ICS Advisory ICSA-25-317-16 JSONself
- ICS Advisory ICSA-25-317-16 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationAltair Grid Engine
For clusters not using the UGERest API/daemon remove the setuid-root bit from the binaries for all architectures: chmod u-s $SGE_ROOT/utilbin/<arch>/authuser.
- MitigationAltair Grid Engine
For non Windows clusters remove the setuid-root bit from the "sgepasswd" binary for all installed architectures: chmod u-s $SGE_ROOT/bin/<arch>/sgepasswd.
- FixedAltair Grid Engine
Update to V2026.0.0 or later version
https://altairone.com/Marketplace - FixedAltair Grid Engine
Update to V2026.0.0 or later version
https://altairone.com/Marketplace
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan