CVE-2026-73784
Received Received - Intake

SAML Response Tampering in HPE IceWall

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: Hewlett Packard Enterprise (HPE)

Description
A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-11
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-73784
EUVD
EUVD-2026-75975

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe icewall *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in HPE IceWall products allows an attacker to tamper with SAML responses, which are used for authentication. By altering these responses, the attacker can impersonate another user, gaining unauthorized access to systems or data.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to sensitive systems or data, allowing attackers to perform actions as another user. This could result in data breaches, privilege escalation, or further network compromise depending on the user impersonated.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating compliance requirements under GDPR, HIPAA, or other regulations. Organizations may face legal penalties, reputational damage, and loss of trust due to non-compliance resulting from such breaches.

Mitigation Strategies

Apply patches or updates provided by HPE for IceWall products as soon as possible. Monitor HPE security bulletins for advisories and disable SAML response tampering features if not required. Review and restrict user permissions to minimize impact.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73784. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart