critical window to report exploited vulnerabilities under the Cyber Resilience Act.
Cyber Resilience Act Reporting from 11 September 2026: SME Requirements
The Cyber Resilience Act reporting obligations under Article 14 apply starting 11 September 2026, with no grandfathering for existing products. Discover the 24-hour notification cascade, SBOM requirements, and open source scope.