Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:altair_grid_engine:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductAltair Grid Engine (8a9f7bae-b2f3-5a7e-8812-e0a0224e42e0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40763 vulnerable 2026-06-08 07:25:05.574173 Details available
HIGH (7.8)
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary code with superuser privileges by manipulating the environment variable and placing a malicious library in the controlled path.
Published: 2025-11-11T20:20:36.755Z
Updated: 2025-11-12T18:41:52.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40760 vulnerable 2026-06-08 07:25:05.568059 Details available
MEDIUM (5.5)
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests. This could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks.
Published: 2025-11-11T20:20:35.579Z
Updated: 2025-11-12T19:30:50.394Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.