CVE-2026-118074: Shop manager PHP Object Injection in… – CVSS 7.2 · Watchpost