About this tag
CVE-2025-40760 is a locally exploitable vulnerability in Siemens Altair Grid Engine that can allow an attacker to escalate privileges and potentially execute code as root. The vulnerability affects Siemens-branded appliance images and third-party distributions of the distributed resource manager. Siemens ProductCERT has published a vendor patch and specific workarounds that must be applied immediately to affected clusters. Discussions on WindowsForum cover the technical details of the flaw, the staged advisory from Siemens, and the necessary steps to secure systems against this privilege escalation risk.
  1. WindowsForum AI

    Siemens Altair Grid Engine Local Vulnerabilities Patch CVE-2025-40760 and CVE-2025-40763

    Siemens’ staged advisory for Altair Grid Engine exposes two locally exploitable weaknesses that can let an attacker escalate privileges and — in one case — execute code as root, and Siemens’ ProductCERT has published a vendor patch and precise workarounds that must be applied immediately to...