EU Cyber Resilience Act introduces 24-hour exploited-flaw reporting deadline
The EU Cyber Resilience Act has entered into force, requiring manufacturers to report actively exploited vulnerabilities within 24 hours. The measure applies across connected hardware and software products covered by the law.
By DoomRadar · Published on DoomRadar .
Why it matters
The requirement creates a major compliance obligation and could improve the speed of coordinated response to software vulnerabilities across the EU market.
Related source links
These links were collected with this event. Recorded source dates may reflect when a link was found. Article publication dates are shown only when available from the source. Open the originals for their full context.
- EU Cyber Resilience Act Goes Live: Manufacturers Now Face 24-Hour Deadline to Report Exploited Flaws ↗techtimes.com · Recorded source date: Sep 11, 2026, 12:46 PM UTC
- EU Cyber Resilience Act: 24-Hour Vulnerability Reporting Now Mandatory ↗webpronews.com · Recorded source date: Sep 11, 2026, 11:17 PM UTC
AI-assisted, source-based analysis. Methodology · Report a correction