---
id: 7616
title: "EU Cyber Resilience Act: Manufacturers face 24-hour deadline to report actively exploited vulnerabilities"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/news/cyber-resilience-act-24-hour"
published_at: "2026-09-18T08:50:00Z"
tags: ["bug-bounty", "compliance", "vulnerability-disclosure", "regulation", "product-security", "eu-cyber-resilience-act"]
phying_url: "https://phying.com/item/7616"
lang: en
---

# EU Cyber Resilience Act: Manufacturers face 24-hour deadline to report actively exploited vulnerabilities

## Summary

The EU CRA's vulnerability reporting rules took effect on 11 Sept 2026: makers of digital products must report actively exploited vulnerabilities within 24h, facing fines up to EUR 15M.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-09-18T08:50:00Z
- **Original:** https://www.yeswehack.com/news/cyber-resilience-act-24-hour
- **Phying News:** https://phying.com/item/7616