CVE-2026-16822

CriticalCVSS 9.3

Published: 19/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 contain a vulnerability due to improper certificate validation, allowing a remote attacker to impersonate the TNC policy server and modify traffic.

Risk Assessment

An attacker can intercept and modify network traffic, potentially leading to integrity and confidentiality breaches.

Recommendation

Update systems to versions with certificate validation fixes provided by IBM.

Original NVD description (English source)

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation.