Glossary: Vulnerability Management and Monitoring

Cyber Resilience Act

Also written: CRA

An EU law that, since September 11, 2026, requires makers of products with digital elements sold in the EU to report actively exploited vulnerabilities: an early warning within 24 hours, a notification within 72 hours, then a final report.