Docker fixed a critical Hub account conversion flaw that let transferred tokens push images as other users; it found no evidence of exploitation.
A critical heap buffer overflow vulnerability (CVE-2026–39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files.
The flaw was discovered on August 23 by researchers at Defiant’s platform Wordfence using their Argus AI-powered system.
Ghostscript is a PostScript and PDF interpreter that can render PDFs as images, generate thumbnails for previews, and optimize PDF files by compressing embedded images and removing unnecessary font data.
Microsoft released the Windows 10 KB5126657 extended security update, which includes this month’s record-breaking October 2026 Patch Tuesday fixes and a few bug fixes and changes.
If you are running Windows 10 Enterprise LTSC or are enrolled in the ESU program, you can install this update like normal by going into Settings, clicking on Windows Update, and manually performing a ‘Check for Updates.’
After installing this update, Windows 10 will be updated to build 19045.7807, and Windows 10 Enterprise LTSC 2021 will be updated to build 19044.7807.
While the investigators emphasize that PLIN4 variants were identified in a selected clinical subpopulation and require replication across larger, multi-ancestry cohorts, the identification of a peripheral fat-storage defect opens immediate avenues for drug discovery.
“Discovering genes that underlie this disease isn’t going to fix the disease,” Robison concluded. “But what it can do is teach us what’s causing the disease in lots of people, and we can use that information to design new treatments.”
The research team plans to analyze primary adipocyte tissue from anorexia patients carrying PLIN4 mutations to observe lipid droplet morphology and metabolic signaling directly, working toward therapies that can target peripheral lipid regulation alongside psychological rehabilitation.