CVE-2026-49299 — In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names ev — CVE Database · The Intelligence Room