Daily Current Affairs · 23 October 2026

UPSC Current Affairs 23 October 2026 | Emissions Gap Report, PHP2Shell, Loss and Damage Fund, RBI MPC & More

← All blog posts

Table of Contents

  1. Emissions Gap Report 2026: 1.5°C Breach Now Unavoidable (GS 3 – Environment)
  2. PHP2Shell: The Flaw That Forced Websites to Shut Down Worldwide (GS 3 – Cyber Security)
  3. Nepal Becomes First Beneficiary of the Loss and Damage Fund (GS 2 & 3 – IR, Environment)
  4. Trump Shelves Plan to Rename the Atlantic Ocean (GS 1 & 2 – Geography, IR)
  5. RBI Rate-Setters Split Over Spreading Inflation (GS 3 – Economy)
  6. Why eMudhra Exited the Global Digital Certificates Business (GS 3 – Cyber Security, Economy)
  7. Bridge Grafting to Save 500+ Girdled Trees in Udanti-Sitanadi Tiger Reserve (GS 3 – Environment)

1. Emissions Gap Report 2026: Breach of 1.5°C Threshold Now 'Unavoidable'

Syllabus: GS Paper 3 – Environment, Climate Change, International Agreements

Why in the News?

The United Nations Environment Programme (UNEP) released the Emissions Gap Report (EGR) 2026, titled "The Point of Return", on 21 October 2026. For the first time, UNEP has declared that holding global warming below 1.5°C above pre-industrial levels with no or limited overshoot is no longer possible. The task now is to keep the overshoot as small and as short as possible and bring temperatures back below 1.5°C by 2100.

Key Facts at a Glance

ParameterDetail
ReportEmissions Gap Report 2026 – "The Point of Return" (17th edition)
Published byUnited Nations Environment Programme (UNEP), Nairobi
Released on21 October 2026, London
TimingAhead of COP31 at Antalya, Türkiye
Global GHG emissions (2025)About 58.4 Gt CO₂e, a marginal decline
Emission trendFossil CO₂, N₂O and F-gases rose in 2025; methane stayed nearly flat
Cuts needed to return to 1.5°C (vs 2025 levels)18% by 2030, 45% by 2035, 69% by 2040
Core messageOvershoot of 1.5°C is inevitable; minimise its size and duration

Key Findings Explained

  • End of the "no-overshoot" pathway: Decades of insufficient action mean every realistic scenario now crosses 1.5°C. The debate shifts from avoiding to limiting and reversing overshoot.
  • Fossil emissions keep rising: Total GHG emissions dipped slightly, but CO₂ from coal, oil and gas combustion continued to grow.
  • Warming already visible: 2024 was the first calendar year above 1.5°C, and September 2026 was the second-hottest month on record.
  • "Overshoot is not surrender": The UN Secretary-General stressed that steep, fast cuts can still pull temperatures back below 1.5°C within this century.
  • Scalable solutions exist: The report highlights climate policies that have already delivered real emission cuts and could be replicated globally.

Static Concepts for Prelims

  • Emissions Gap: The difference between where global emissions are projected to be (under current policies and NDCs) and where they should be to meet Paris goals.
  • Overshoot: Temporarily exceeding a temperature limit before bringing it down again, usually through deep emission cuts and carbon dioxide removal.
  • Paris Agreement (2015): Aims to hold warming "well below 2°C" and pursue efforts to limit it to 1.5°C. Countries submit Nationally Determined Contributions (NDCs) every five years.
  • UNEP: Established in 1972 after the Stockholm Conference; headquartered in Nairobi, Kenya. Other flagship reports include the Global Environment Outlook and the Adaptation Gap Report.
  • Origin of the 1.5°C goal: First championed by small island states at Copenhagen (COP15, 2009) because sea-level rise threatens their survival.

Significance for India

  • India faces intense heatwaves, erratic monsoons and glacier melt, all of which worsen with each tenth of a degree.
  • Overshoot raises the demand for climate finance, adaptation and carbon removal, sharpening the developed–developing divide on equity and Common But Differentiated Responsibilities (CBDR-RC).
  • India's per capita emissions remain among the lowest of major economies, which strengthens its negotiating position at COP31.

Mains Angle

"With the 1.5°C limit set to be breached, global climate policy must move from mitigation targets to managing overshoot." Critically examine the implications for developing countries like India. (250 words)

2. PHP2Shell: The Flaws That Forced Websites to Shut Down Worldwide

Syllabus: GS Paper 3 – Cyber Security, Science and Technology

Why in the News?

Two critical vulnerabilities in the core engine of PHP, the scripting language behind roughly 70% of websites, were disclosed in October 2026 under the name PHP2Shell. A working exploit leaked before patches were ready, prompting governments, Wikipedia, the Internet Archive and thousands of other sites to go offline as a precaution.

Key Facts at a Glance

ParameterDetail
NamePHP2Shell
IdentifiersCVE-2026-109618 and CVE-2026-109619
SeverityCVSS score 9.2 (critical)
Type of attackRemote Code Execution (RCE) without login or user interaction
Affected softwarePHP core engine; platforms such as WordPress, Drupal, Joomla, MediaWiki
ReachPHP powers about 70% of websites
Peak disruption21 October 2026 – thousands of sites offline
Notable shutdownsWikimedia services, Internet Archive, EU and Dutch government portals, Finnish and French government sites, 4chan
Exposure after patchAround 32.5 million PHP services still running vulnerable versions
StatusActive exploitation confirmed; listed in the US CISA Known Exploited Vulnerabilities catalogue

What Happened?

  • Discovery with AI help: The flaws were reportedly found with the assistance of AI-driven security research.
  • Disclosure gone wrong: Normally, a patch is ready before details become public (responsible disclosure). Here, a proof-of-concept leaked early on an online forum.
  • Precautionary shutdowns: Cyber agencies in Europe, Canada and the US advised organisations to take sites offline or into maintenance mode until patched.
  • Real-world attacks: Threat actors chained PHP2Shell with a Linux privilege-escalation bug to gain root access on servers, including some linked to government networks.
  • Patch gap: Many servers still run outdated PHP versions (such as 7.4 or 8.1 and earlier) that no longer receive regular security updates.

Static Concepts for Prelims

  • Remote Code Execution (RCE): A flaw that lets an attacker run any command on a target machine from a distance.
  • CVE (Common Vulnerabilities and Exposures): A public catalogue that gives each known flaw a unique ID.
  • CVSS: A 0–10 scale that rates how severe a vulnerability is; 9.0 and above is "critical".
  • Zero-day: A flaw exploited before a fix is available.
  • CERT-In: India's national nodal agency for cyber incident response under Section 70B of the IT Act, 2000, working under MeitY.
  • NCIIPC: Protects India's Critical Information Infrastructure under Section 70A of the IT Act.

Significance for India

  • Many Indian government, university and e-governance portals run on PHP-based content management systems.
  • The episode highlights the risk of unsupported legacy software in public digital infrastructure.
  • It shows that AI can speed up both the discovery and the exploitation of vulnerabilities, demanding faster patching cycles.
  • It strengthens the case for a robust National Cyber Security Strategy and mandatory patch-management audits.

Mains Angle

"Open-source software is a global public good but also a single point of failure." Discuss in the context of recent cyber incidents and suggest measures for India. (150 words)

3. Nepal Becomes the First Beneficiary of Global Funding for Loss and Damage

Syllabus: GS Paper 2 – International Relations; GS Paper 3 – Environment, Disaster Management

Why in the News?

The Fund for Responding to Loss and Damage (FRLD) has provisionally earmarked US$20 million for Nepal to recover from the devastating floods of 26 August 2026. It is the first time the fund has set aside money for any country, turning years of pledges into an actual allocation.

Key Facts at a Glance

ParameterDetail
BeneficiaryNepal – the first country to receive an FRLD allocation
DisasterFlash floods of 26 August 2026 (Rasuwa region)
AmountUS$20 million grant + US$1.6 million oversight fee = US$21.6 million
CapUS$20 million is currently the maximum the fund can approve for a single event
Nepal's estimated lossesAbout US$5 billion, roughly 10% of its GDP
Share coveredUnder 1% of the estimated losses
Trustee / hostWorld Bank
Next board meeting11th meeting, Kathmandu, 17–19 March 2027

Evolution of the Loss and Damage Fund

YearMilestone
2013Warsaw International Mechanism (WIM) for Loss and Damage set up at COP19
2015Article 8 of the Paris Agreement recognises loss and damage
2019Santiago Network created at COP25 for technical assistance
2022COP27 at Sharm el-Sheikh, Egypt, agrees to establish the fund
2023COP28 at Dubai, UAE, operationalises the fund
2026First allocation – Nepal

Static Concepts for Prelims

  • Loss and damage: Climate impacts that go beyond what adaptation can prevent, covering both economic losses (homes, crops, infrastructure) and non-economic losses (lives, culture, biodiversity).
  • Sudden-onset vs slow-onset events: Floods, cyclones and cloudbursts are sudden; sea-level rise, glacier retreat and desertification are slow.
  • Barbados Implementation Modalities (BIM): The start-up phase through which the FRLD is first disbursing money.
  • Related funds: Green Climate Fund (GCF), Adaptation Fund, Global Environment Facility (GEF).

Significance

  • Climate justice milestone: Developing countries, least responsible for emissions, finally see compensation-style finance flow.
  • Test of credibility: Nepal's case is shaping how quickly the fund can disburse money after disasters.
  • Funding gap exposed: A US$20 million cap against US$5 billion of losses shows how under-resourced the fund remains.
  • Relevance for India: As a Himalayan neighbour facing similar glacial lake outburst floods and cloudbursts, India has a stake in rapid-response climate finance and regional disaster cooperation.

Mains Angle

"The first allocation from the Loss and Damage Fund is a milestone, but it also exposes the gap between climate promises and delivery." Discuss. (150 words)

4. Trump Shelves Plan to Rename the Atlantic Ocean After a 'No' from Pichai

Syllabus: GS Paper 1 – World Geography; GS Paper 2 – International Relations

Why in the News?

At a rally in South Carolina, US President Donald Trump said he had asked Google CEO Sundar Pichai to rename the Atlantic Ocean on Google Maps. According to Trump, Pichai declined, saying oceans are different because they touch many countries. Trump said he would "probably pass" on the idea, though he floated calling the Pacific "the American Ocean".

Key Facts at a Glance

ParameterDetail
ProposalRename the Atlantic Ocean (with "Trump" or "America")
ResponseGoogle declined, according to Trump; Google has not confirmed the call
Earlier renaming 1Gulf of Mexico → "Gulf of America" (shown to US users on Google Maps since 2025)
Earlier renaming 2Lake Ontario → "Lake America" (August 2026 executive order; Google and Apple Maps followed)
Next targets mentionedA river (Hudson or Mississippi) and the Pacific Ocean

How Are Geographical Features Named?

  • Domestic features: In the US, the Board on Geographic Names standardises names for federal use. In India, the Survey of India and the Ministry of Home Affairs handle renaming of places.
  • International waters: The International Hydrographic Organization (IHO), headquartered in Monaco, publishes the reference document Limits of Oceans and Seas (S-23). India is a member.
  • UN coordination: The United Nations Group of Experts on Geographical Names (UNGEGN) promotes consistent use of names worldwide.
  • No unilateral power: A single country cannot rename an ocean shared by many nations; it can only change names used within its own official records.

Static Facts on the Atlantic Ocean

  • Second-largest ocean, covering about one-fifth of Earth's surface.
  • Separates the Americas from Europe and Africa; S-shaped basin.
  • Key features: Mid-Atlantic Ridge, Gulf Stream, Sargasso Sea, Bermuda Triangle.
  • Lake Ontario, the smallest of the Great Lakes by area, is shared by the US and Canada, which makes its unilateral renaming diplomatically sensitive.

Significance

  • Cartographic nationalism: Names on maps are increasingly used to assert identity and sovereignty, as in disputes over the Sea of Japan/East Sea and the Persian Gulf/Arabian Gulf.
  • Role of Big Tech: Private platforms like Google Maps now shape how billions see geography, raising questions about corporate neutrality under political pressure.
  • India's experience: India has objected to China "renaming" places in Arunachal Pradesh, showing that naming is a tool of strategic messaging.

Mains Angle

"Maps are not neutral." Examine the growing use of place-naming as a geopolitical tool, with examples. (150 words)

5. RBI Rate-Setters Split Over Inflation Spreading

Syllabus: GS Paper 3 – Indian Economy, Monetary Policy, Inflation

Why in the News?

Minutes of the Reserve Bank of India's Monetary Policy Committee (MPC) meeting of 5–7 October 2026, released on 21 October, show that all six members backed a 25 basis point hike in the repo rate to 5.50%. But they were split 4–2 on whether inflation is spreading across the economy, and therefore on changing the policy stance to "calibrated tightening".

Key Facts at a Glance

ParameterDetail
Meeting63rd MPC meeting, 5–7 October 2026
Minutes released21 October 2026 (under Section 45ZL, RBI Act, 1934)
DecisionRepo rate raised by 25 bps to 5.50% – unanimous
StanceChanged from "neutral" to "calibrated tightening" – 4:2 vote
Majority viewGovernor Sanjay Malhotra and three others saw inflation becoming broad-based
Minority viewTwo external members saw no strong signs of generalised inflation
CPI forecast FY275.2% (up from 5.0% in August); Q3 at 6.0%
Core inflation (August)4.2% (up from 3.9% in July)
GDP forecast FY277.1%
Earlier cycleCumulative 125 bps of cuts, from 6.5% to 5.25%, before this hike
Next meeting2–4 December 2026

What Is Driving the Debate?

  • Supply shocks: Conflict in West Asia has pushed up crude oil prices, while food prices remain volatile.
  • Spillover risk: The majority worried that price pressures are moving from food and fuel into core goods and services, which tends to make inflation persistent.
  • Minority caution: Two members felt the pressure is still supply-driven, and that signalling more tightening could hurt growth unnecessarily.
  • Outlook: The minutes suggest the choice in December will be between another hike and a pause, not a cut.

Static Concepts for Prelims

  • MPC: Six-member body constituted under Section 45ZB of the RBI Act, 1934 (inserted by the Finance Act, 2016). Three members are from the RBI, including the Governor as chair; three are external members appointed by the Central Government.
  • Voting: Decisions are by majority; the Governor has a casting vote in case of a tie.
  • Inflation target: CPI inflation of 4% with a tolerance band of ±2%, set by the government every five years.
  • Repo rate: The rate at which RBI lends short-term funds to banks against government securities.
  • Policy stances: Accommodative, neutral, calibrated tightening, withdrawal of accommodation.
  • Generalised inflation: When price rises spread across a wide basket of items, not just a few volatile ones.
  • Core inflation: CPI inflation excluding food and fuel.

Significance

  • Marks a clear reversal of the easing cycle, which will raise EMIs on home and auto loans.
  • Dissent within the MPC reflects healthy debate and transparency in India's inflation-targeting framework.
  • Shows the limits of monetary policy against supply-side shocks such as oil prices.

Mains Angle

"Monetary policy is a blunt tool against supply-side inflation." Discuss in the light of the RBI's recent policy shift. (250 words)

6. Why eMudhra Exited the Digital Certificates Business

Syllabus: GS Paper 3 – Cyber Security, Digital Infrastructure

Why in the News?

Bengaluru-based digital trust company eMudhra announced on 22 October 2026 that it is voluntarily exiting the global SSL/TLS certificate business. The move followed the discovery that private keys behind eight of its intermediate Certificate Authority (CA) certificates were weak or compromised, leading major browsers to stop trusting its certificates.

Key Facts at a Glance

ParameterDetail
CompanyeMudhra Limited, Bengaluru
DecisionBoard-approved exit from the global SSL/TLS certificate business
TriggerWeak/compromised private keys in eight intermediate CA certificates
Browser responseGoogle, Mozilla, Apple and Microsoft moved to distrust its certificates
AdvisoryIssued by CERT-In
Revenue impactGlobal SSL/TLS business is about 1% of total revenue
Market reactionShares fell about 20% in a single session
Unaffected businessesIndian Digital Signature Certificates (DSC), eSign, enterprise PKI
Customer transitionReplacement certificates through partner CAs
Company's stated reasonsRising compliance costs, operational complexity, declining viability

What Are SSL/TLS Certificates?

  • SSL (Secure Sockets Layer) / TLS (Transport Layer Security) are protocols that encrypt data between a browser and a website. The padlock and "https" in the address bar show they are in use.
  • A Certificate Authority verifies a website's identity and issues a digital certificate signed with its private key.
  • Chain of trust: Root CA → Intermediate CA → Website certificate. Browsers trust a site only if this chain is intact.
  • Why weak keys are dangerous: If a CA's private key can be derived, attackers can issue fake certificates to impersonate banks, government portals or any website and intercept traffic.

Indian Regulatory Framework

  • Information Technology Act, 2000 gives legal recognition to electronic signatures and records.
  • Controller of Certifying Authorities (CCA) under MeitY licenses and regulates CAs in India. eMudhra is one such licensed CA.
  • Digital Signature Certificates (DSC) are used for e-filing of income tax, company filings (MCA), e-tenders and GST.
  • eSign is an Aadhaar-based online electronic signature service.

Significance

  • Trust is the product: In digital certificates, a single lapse can end a business line, regardless of its size.
  • Global gatekeepers: Browser makers' root programmes effectively decide which CAs the world trusts, showing the concentration of power in a few tech firms.
  • Digital sovereignty: India's ambition to build trusted Indian CAs for global use suffers a setback; strict key-generation standards and audits become vital.
  • Link to DPI: India's Digital Public Infrastructure depends on robust PKI; continued integrity of DSC and eSign services is critical.

Mains Angle

"Public Key Infrastructure is the invisible backbone of the digital economy." Discuss its importance and the challenges in securing it, with reference to recent incidents. (150 words)

7. Forest Department to Seek Expert Help for 'Surgery' on 500+ Girdled Trees in Udanti-Sitanadi Tiger Reserve

Syllabus: GS Paper 3 – Environment, Conservation, Biodiversity

Why in the News?

The Chhattisgarh Forest Department is seeking expert help to save over 500 freshly girdled trees near Karka village inside the Udanti-Sitanadi Tiger Reserve (USTR). Encroachers allegedly girdled the trees to kill them and clear land for cultivation. The department plans to use bridge grafting, a form of tree surgery, and is also drawing on the traditional knowledge of local tribal communities.

Key Facts at a Glance

ParameterDetail
LocationKarka area, Udanti-Sitanadi Tiger Reserve, Chhattisgarh
Survey period22 September – 10 October 2026
Girdled trees foundAbout 2,500
Freshly girdled (savable)Over 500
Main speciesSal, Bija and Tendu
CauseAlleged girdling by encroachers to clear forest for farming
Long-term lossOver 1.25 lakh trees estimated cleared in the landscape between 2016 and 2026
Rescue techniqueBridge grafting
Past attempt2022 trial in the reserve achieved only about 10% success

What Is Girdling?

  • Girdling (ring-barking) is the removal of a strip of bark all the way around a tree trunk.
  • It cuts the phloem, which carries food (sugars) from leaves down to the roots, and damages the cambium, the layer that produces new tissue.
  • The roots starve, and the tree dies slowly while still standing.
  • Order of layers from outside in: Bark → Phloem → Vascular cambium → Xylem → Pith.

What Is Bridge Grafting?

  • A repair graft used to rescue trees girdled by animals, machinery or people.
  • Healthy twigs (scions) are inserted to connect the living bark and cambium above the wound to the bark below it.
  • These "bridges" restore the flow of food from leaves to roots, letting the tree survive.
  • It needs skilled labour and precise timing, and success rates are often low.

About Udanti-Sitanadi Tiger Reserve

  • Location: Gariaband and Dhamtari districts, Chhattisgarh.
  • Notified: 2009, combining the Udanti and Sitanadi Wildlife Sanctuaries.
  • Area: About 1,842 sq km (core about 851 sq km; buffer about 991 sq km).
  • Rivers: Named after the Udanti and Sitanadi rivers; lies in the origin landscape of the Mahanadi.
  • Forest type: Tropical dry and moist deciduous, dominated by Sal.
  • Fauna: Tiger, wild buffalo (Chhattisgarh's state animal), leopard, sloth bear, Indian wolf, mouse deer.
  • Connectivity: Links with Odisha's Sunabeda Wildlife Sanctuary and the Indravati Tiger Reserve landscape.

Significance

  • Encroachment threat: Girdling is a quiet method of clearing forests without visible felling, making it harder to detect and prosecute.
  • Rights vs conservation: Highlights the tension between forest-dweller claims under the Forest Rights Act, 2006 and protection of core tiger habitat under the Wildlife (Protection) Act, 1972.
  • Innovative restoration: A rare attempt to repair, rather than replant, damaged forest, which can be a model for other degraded forests.
  • Water security: Restoring this landscape supports the health of the Mahanadi river system.

Mains Angle

"Encroachment, not poaching, is emerging as the biggest threat to India's tiger reserves." Critically analyse. (150 words)