Reported by 1 outlet
EU Cyber Resilience Act 24-Hour Vulnerability Disclosure Takes Effect
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.50 / 2.0 · best outlet weight
- Severity
- 1.20 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
The EU Cyber Resilience Act's 24-hour vulnerability disclosure clock is now in effect. Manufacturers must disclose actively exploited flaws and severe security vulnerabilities within 24 hours. The Register reported the activation on September 11, 2026. The regulation targets connected products and changes how vendors in the EU must respond to security flaws, adding compliance pressure on manufacturers that previously moved slowly on patches.
This is a regulatory milestone rather than a technical vulnerability, but it carries operational weight. Organizations relying on EU-market devices should expect faster vendor disclosures and tighter reporting timelines. Watch for the first enforcement actions and how vendors adjust disclosure practices under the new deadline.
Timeline
-
original reporting
EU's Cyber Resilience Act starts the 24-hour vulnerability clock Manufacturers must now disclose actively exploited flaws and severe securit
www.theregister.com · 32d ago · September 12th, 2026
EU's Cyber Resilience Act starts the 24-hour vulnerability clock Manufacturers must now disclose actively exploited flaws and severe securit
via Mastodon https://www.theregister.com/security/2026/09/11/eus-cyber-resilience-act-starts-the-24-hour-vulnerability-clock/5295821
-
mentioned by www.theregister.com
EU's Cyber Resilience Act starts the 24-hour vulnerability clock https://www. theregister.com/security/2026/ 09/11/eus-cyber-resilience-act-
www.theregister.com · 12d ago · October 2nd, 2026