This vulnerability in PeakShops arises from unsafe deserialization of untrusted data, enabling an attacker to perform object injection attacks. Such attacks can lead to arbitrary code execution or other malicious outcomes affecting confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.8, reflecting high impact and ease of exploitation with network attack vector, low attack complexity, and no user interaction required. The affected versions include all releases up to 1.5.9. There is no vendor advisory or patch information available at this time.

Successful exploitation can result in full compromise of the affected PeakShops installation, including unauthorized disclosure, modification, or destruction of data and disruption of service. The vulnerability impacts confidentiality, integrity, and availability with high severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to the affected application and monitoring for suspicious activity related to deserialization processes.