FR/EN SEO pages
ENISA Article 14 notification: 24h, 72h, final report
Prepare CRA notification fields for an exploited vulnerability or severe incident from September 2026.
24hearly warning for exploited vulnerability or severe incident
72hfull notification after becoming aware
14dfinal report after a fix for exploited vulnerability
2027-12-11general application of CRA requirements
CRA product diagnostic
- Run vulnerability handling - Document intake, triage, remediation, coordinated disclosure, evidence and Article 14 notification readiness.
- Documented triage - Assess exploitability, EU exposure, severity, affected versions, workaround and remediation decision.
- General application - Main CRA obligations apply to products with digital elements made available on the EU market.
Templates ready to adapt
Nature: [CVE/incident]. Affected versions: [list]. Initial impact: [confidentiality/integrity/availability]. Corrective or mitigating measures taken: [details]. User actions: [patch/configuration]. Information sensitivity: [level].