
Zohaib Masood
EU Cyber Resilience Act Reporting Starts 11 September 2026: The 24-Hour Clock Manufacturers Missed
From 11 September 2026 the CRA gives manufacturers 24 hours to report an actively exploited vulnerability, 72 for a full notification and 14 days for a final report - and it applies to products already on the EU market. Here are the deadlines, the platform and what to fix before Friday.
EU Cyber Resilience ActCRA reporting obligationsENISA Single Reporting Platform