EU CRA Vulnerability Reporting: The 24-Hour Rule for September 2026 Beginning September 11, 2026, any company placing a product with digital elements on the EU market must file an early warning to ENISA within 24 hours. https://www.certivo.com/blog-details/eu-cra-vulnerability-reporting-the-24-hour-rule-and-how-to-prepare-for-september-2026