{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/mime/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:perl:mime-tools:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-116264"},{"id":"CVE-2026-116265"},{"id":"CVE-2026-116266"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["MIME-tools (\u003c 5.521)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","perl","mime"],"_cs_type":"advisory","_cs_vendors":["Perl"],"content_html":"\u003cp\u003eThe Perl MIME-tools library (versions prior to 5.521) contains multiple vulnerabilities related to the improper parsing of MIME headers. These issues, identified as CVE-2026-116264, CVE-2026-116265, and CVE-2026-116266, allow attackers to manipulate Content-Type parameters and multipart boundaries. Such manipulation can result in parameter hiding or ambiguous parsing, which may lead to security policy bypasses or desynchronization attacks when downstream components or mail filters process the malformed messages.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerabilities allow for the crafting of MIME messages that deceive parsers regarding the structure and content of the message body. This can be exploited to bypass security filters that rely on MIME-tools for identifying multipart boundaries or content types, potentially allowing malicious payloads to reach intended destinations by evading inspection.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the Perl MIME-tools library to version 5.521 or later on all systems using this component.\u003c/li\u003e\n\u003cli\u003eAudit applications that process external email or MIME-encoded content for reliance on MIME-tools for security-critical parsing or filtering decisions.\u003c/li\u003e\n\u003cli\u003eMonitor for mail or web traffic logs showing anomalous Content-Type headers or RFC 2231 continuation patterns if high-risk parsing environments are in use.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T20:24:09Z","date_published":"2026-10-28T20:24:09Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mime-tools-vulnerabilities/","summary":"Multiple vulnerabilities in the Perl MIME-tools library prior to version 5.521 allow for header parsing manipulation, potentially leading to security bypasses or desynchronization in applications processing complex MIME messages.","title":"Perl MIME-tools: Header parsing vulnerabilities (CVE-2026-116264, CVE-2026-116265, CVE-2026-116266)","url":"https://feed.craftedsignal.io/briefs/2026-10-mime-tools-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Mime","version":"https://jsonfeed.org/version/1.1"}