https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:16:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-324067 EUVD-2026-324067 https://cve.radiocsirt.org/vuln/euvd-2026-324067 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49299 <p>In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources. Deployments running Neutron 26.0.0 or later are affected.</p> <p>In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources. Deployments running Neutron 26.0.0 or later are affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49299 https://cve.radiocsirt.org/vuln/ghsa-xv24-hxh9-2hh9 <p><strong>Affected:</strong> PyPI: neutron</p> <p>In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources. Deployments running Neutron 26.0.0 or later are affected.</p> <p><strong>Affected:</strong> PyPI: neutron</p> <p>In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources. Deployments running Neutron 26.0.0 or later are affected.</p> https://cve.radiocsirt.org/vuln/ghsa-xv24-hxh9-2hh9 https://cve.radiocsirt.org/vuln/pysec-2026-2678 <p><strong>Affected:</strong> PyPI: neutron</p> <p>In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources. Deployments running Neutron 26.0.0 or later are affected.</p> <p><strong>Affected:</strong> PyPI: neutron</p> <p>In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources. Deployments running Neutron 26.0.0 or later are affected.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2678 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49299 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: neutron, Ubuntu:18.04:LTS: neutron, Ubuntu:20.04:LTS: neutron, Ubuntu:22.04:LTS: neutron, Ubuntu:24.04:LTS: neutron, Ubuntu:25.10: neutron, Ubuntu:26.04:LTS: neutron</p> <p>In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources. Deployments running Neutron 26.0.0 or later are affected.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: neutron, Ubuntu:18.04:LTS: neutron, Ubuntu:20.04:LTS: neutron, Ubuntu:22.04:LTS: neutron, Ubuntu:24.04:LTS: neutron, Ubuntu:25.10: neutron, Ubuntu:26.04:LTS: neutron</p> <p>In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags on same-project resources. Deployments running Neutron 26.0.0 or later are affected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49299