The Cyber Resilience Act (CRA) is an EU regulation that sets cybersecurity requirements for products with digital elements throughout their lifecycle. From 11 September 2026, manufacturers must report actively exploited vulnerabilities within 24 hours under Article 14.
