CVE-2026-96344

The vulnerability affects versions of the eCommerce Product Catalog up to 3.6.0, where a custom role PHP Object Injection can be exploited. This could allow an attacker to execute arbitrary PHP code, potentially leading to unauthorized access or manipulation of sensitive data. Organizations using this software should prioritize patching to mitigate the risk of exploitation.