CVE-2026-16822 is a vulnerability in IBM AIX 7.2 and 7.3, and IBM PowerVM VIOS 4.1, where improper certificate validation (CWE-295) could enable a remote attacker to impersonate the Trusted Network Connect (TNC) policy server. This impersonation could allow the attacker to modify network traffic, potentially impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 9.3, reflecting critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and scope change. No vendor advisory or patch information is currently available.

A remote attacker could impersonate the TNC policy server due to improper certificate validation, allowing modification of network traffic. This compromises the integrity and confidentiality of communications relying on the TNC policy server. The vulnerability does not affect availability. The critical CVSS score indicates a high risk of exploitation if leveraged.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor IBM's security advisories for updates. No vendor-provided mitigations or temporary fixes are currently documented.