Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypass (CVE-2026-48008) | HOL Guard CVE