[CRITICAL] prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

PKSA-36b6-kgzr-fpm3 CVE-2026-54159 GHSA-m5f5-28qr-9g9r

Affected version: >=3.0.0,<4.0.4

Reported by:
GitHub