Translations:Cyber Resilience Act (CRA)/34/en
Aus RI Wiki
Art 14 establishes various reporting obligations for manufacturers of hardware and software products. Actively exploited vulnerabilities must be reported to the European Union Agency for Cybersecurity (ENISA):