MIME Parsing Flaw in Perl MIME::Field::ParamVal Affects Data Integrity
CVE-2026-116272

Currently unrated

Key Information:

Vendor

Perl

Status
Vendor
CVE Published:
28 October 2026

What is CVE-2026-116272?

MIME::Field::ParamVal versions prior to 5.521 for Perl exhibit a vulnerability that fails to properly flag duplicate boundary parameters containing nested comments. This oversight allows a malicious remote sender to exploit the MIME parsing mechanism, potentially hiding attachments from filtering systems. As a result, users' mail clients may display content differently, enabling unauthorized data access and undermining email security.

References

https://metacpan.org/release/DSKOLL/MIME-tools-5.521/changes
release-notes

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.