prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE (CVE-2026-54159) | HOL Guard CVE