Shopware: Timing-attack on admin panel allowing enumeration of administrator usernames (CVE-2026-48011) | HOL Guard CVE