EU Cyber Resilience Act: Mandatory Vulnerability Reporting Begins September 11, 2026
From September 11, 2026, products with digital elements sold in the EU must report actively exploited vulnerabilities to ENISA. Full enforcement follows in December 2027.