Skip to content
VulniPulse
Sign in
Medium 2 vendors · 2 advisories

CVE-2026-116265: MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations

CVE-2026-116265 key facts

CISA KEV
Not listed (catalogue checked )
Highest advisory rating
Medium
CVSS base score
5.3 (Red Hat)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · base score 5.3, scored by CISA-ADPAttack vector: network. Attack complexity: low. Privileges required: none. User interaction: none. Scope: unchanged. Confidentiality impact: none. Integrity impact: low. Availability impact: none.
Weakness
  • CWE-436 Interpretation Conflict
CISA SSVC
Exploitation: none observed. Automatable: yes. Technical impact: partial. CISA, .
Vendor advisories
2 from Proxmox, Red Hat
Assigned by
CPANSec (CNA)
CVE record published
Listed by VulniPulse
Record changed

Ratings, versions and fixes are quoted from the vendor advisories that cover only CVE-2026-116265; each belongs to its advisory, not to every product listed. How records are collected and checked.

Description

MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations. The boundary ambiguity checks look only at a plain boundary= parameter, and a boundary split into RFC 2231 sections (boundary*0=, boundary*1= and so on) is joined after they have run. A repeated section number is concatenated rather than reported as a duplicate. From version 5.518, an encoded word or trailing whitespace in such a boundary also goes unflagged, although multipart_boundary() decodes or strips it. A remote sender can make MIME::Parser split a message on a different boundary than other mail readers, hiding an attachment from a filter that relies on ambiguous_content() while the recipient's mail client shows it.

Text from the CVE.org record (CPANSec).

How do I fix CVE-2026-116265?

  • Upgrade to MIME-tools 5.521 or later. (CVE.org record)

Vendor advisories for CVE-2026-116265

Proxmox

1 advisory
  • Advisory severityUnrated

    Advisory [CVE-2026-116264 +9] Proxmox Mail Gateway: Several issues in libmime-tools-perl

    PSA-2026-00091Source published

    This bulletin covers 10 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

    The MIME::Tools package is used for parsing mails in Proxmox Mail Gateway. Recently two new releases for MIME::Tools were released upstream, fixing several issues, including 10, which were assigned CVE identifiers. The issues can result in bypassing certain mail-filter rules similar to issues PSA-2026-00005-1 and PSA-2026-00049-1. Additionally parsing certain messages could result in spending an excessive amount of CPU time by pmg-smtp-filter. PMG used the Max files setting of the Virus detector as general limit on the maximal number of parts in a mail since at least version 5.0. This effectively limited the effect of the unlimited CPU time. The fixes for the issues were backported and are available in version 5.515-1+pmg3 of libmime-tools-perl. Additionally a hard-coded limit on the…

    Affected products in this advisory
    • Proxmox Mail Gateway
    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    • libmime-tools-perl 5.515-1+pmg3
    • pmg-api 9.1.5
    Mitigation guidance
    • Update to the fixed package versions: libmime-tools-perl >= 5.515-1+pmg3, pmg-api >= 9.1.5.
    Full advisory and evidenceOpen source bulletin

Red Hat

1 advisory
  • Advisory severityMedium5.3

    Medium [CVE-2026-116265] Security filter bypass via ambiguous multipart boundary continuations

    CVE-2026-116265Source published Source updated

    Security filter bypass via ambiguous multipart boundary continuations. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-179. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat package: perl-mime-tools.

    Related products — impact not confirmed
    • Red Hat Enterprise Linux 6
    • Red Hat package: perl-mime-tools
    Source-reported affected versions
    • < 5.521
    Source-reported fixed versions
    No fixed-version detail extracted. This does not mean no fix exists.
    Mitigation guidance
    No mitigation guidance extracted; consult the source.
    Full advisory and evidenceOpen source bulletin

References

Timeline

  1. CVE record published
  2. First vendor advisory listed by VulniPulse
  3. CVE record last updated

More Proxmox advisories

All Proxmox advisories

Get an email when Proxmox publishes the next one.

See Proxmox's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Proxmox

iPhone and Android apps · New on the App Store

Get alerts for new CVEs on your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Download on the App StoreGet CVE alerts on AndroidSee app features